Static task
static1
Behavioral task
behavioral1
Sample
623888aa344d5354af3c68d6622060d15f9386636ef1e559949652f4d2b20e28.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
623888aa344d5354af3c68d6622060d15f9386636ef1e559949652f4d2b20e28.exe
Resource
win10v2004-20230220-en
General
-
Target
623888aa344d5354af3c68d6622060d15f9386636ef1e559949652f4d2b20e28
-
Size
459KB
-
MD5
a15bca16e0050b49dcb5a0db355ae02e
-
SHA1
d30c8cdb417d050631f76b693d954e2d7afe7859
-
SHA256
623888aa344d5354af3c68d6622060d15f9386636ef1e559949652f4d2b20e28
-
SHA512
11905175f042ff6690e98f9d8cff23dedefa9ea74a201f1dc67a2cd67f91944887726d2bb05fd88411264311c9f4cfcf60c789fda5c90084c0c2cc1169f0c820
-
SSDEEP
12288:/cO9SVkNLhOppZ7039Qe20WBaAMrch0PMYszrDkilrC9HlaP7:UNkNi10iyW0AMrch0PMfnXl+9Fa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 623888aa344d5354af3c68d6622060d15f9386636ef1e559949652f4d2b20e28
Files
-
623888aa344d5354af3c68d6622060d15f9386636ef1e559949652f4d2b20e28.exe windows x86
4eab5c456db865e855960d707bad304c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
BeginPaint
gdi32
SelectClipRgn
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
advapi32
AdjustTokenPrivileges
shell32
ShellExecuteW
comctl32
ImageList_AddMasked
shlwapi
PathFindFileNameW
oledlg
OleUIBusyW
ole32
OleIsCurrentClipboard
oleaut32
OleCreateFontIndirect
ws2_32
WSACleanup
wininet
DeleteUrlCacheEntryA
version
VerQueryValueW
Sections
.text Size: 423KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE