Static task
static1
Behavioral task
behavioral1
Sample
d8625f328129d3591d0b6f88fe62ec6ab38248a0b56e2a260eef04b6c414f42b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d8625f328129d3591d0b6f88fe62ec6ab38248a0b56e2a260eef04b6c414f42b.exe
Resource
win10v2004-20230220-en
General
-
Target
d8625f328129d3591d0b6f88fe62ec6ab38248a0b56e2a260eef04b6c414f42b
-
Size
465KB
-
MD5
24344b0c7097f091affcc289e8029828
-
SHA1
2ee973416945a6b16387943f019260b26d96b2d7
-
SHA256
d8625f328129d3591d0b6f88fe62ec6ab38248a0b56e2a260eef04b6c414f42b
-
SHA512
e77b7c57616917c6e948f9521efc95235d4a1a9e985bda5387ee08ec37db7dad35102df98b0e9eab0c401cab7fe304f7a52cce0c790a32fdc252b38c945994c1
-
SSDEEP
12288:olJ+TFukCI+P9CcrmwEuBwUqA5qFbAGTALHaspq:00U9CcrmwEPA5qFxT7Cq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8625f328129d3591d0b6f88fe62ec6ab38248a0b56e2a260eef04b6c414f42b
Files
-
d8625f328129d3591d0b6f88fe62ec6ab38248a0b56e2a260eef04b6c414f42b.exe windows x86
46b9336adb2f672dcc7203d78b439246
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
DestroyMenu
advapi32
RegQueryValueExW
shell32
ShellExecuteW
ws2_32
recv
iphlpapi
GetAdaptersInfo
oleacc
LresultFromObject
gdi32
DeleteDC
winspool.drv
DocumentPropertiesW
oleaut32
VariantClear
Sections
.text Size: 456KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE