Static task
static1
Behavioral task
behavioral1
Sample
d72238acb2984dbcd816cd7e5b8d3ececbe3a01142172f8ad92daa627d62e6dc.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d72238acb2984dbcd816cd7e5b8d3ececbe3a01142172f8ad92daa627d62e6dc.exe
Resource
win10v2004-20230220-en
General
-
Target
d72238acb2984dbcd816cd7e5b8d3ececbe3a01142172f8ad92daa627d62e6dc
-
Size
271KB
-
MD5
143c8dee1fa2ece84bc0c4f3b2c2fce3
-
SHA1
b884d826a2808636a58bcb245455c69391baeeef
-
SHA256
d72238acb2984dbcd816cd7e5b8d3ececbe3a01142172f8ad92daa627d62e6dc
-
SHA512
4e427df6571675540c9d3f8af4ea63508a0fda904502f5d350a4950ad7e72adac5009baf68aafcb34bf78af6eb356ab1ae2288d39983f3e726d2e1c27a329321
-
SSDEEP
3072:5IMFUU2ttwUIg6wHjdzRXuJiHxNzXA/aafKD5FcSHlyG:5IYSwUIGHjdzRRNzXA/aafKX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d72238acb2984dbcd816cd7e5b8d3ececbe3a01142172f8ad92daa627d62e6dc
Files
-
d72238acb2984dbcd816cd7e5b8d3ececbe3a01142172f8ad92daa627d62e6dc.exe windows x86
1130128d94398cb0d83d464a7bdca951
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHSetValueW
SHGetValueW
PathFileExistsW
PathAppendW
StrCmpNW
StrStrW
kernel32
CreateFileW
GetModuleHandleW
GetProcessHeap
HeapFree
HeapAlloc
GetCommandLineW
GetFileSize
FreeResource
FindResourceW
LoadResource
CreateProcessW
CreateDirectoryW
GetTickCount
WriteFile
SizeofResource
GetFileAttributesW
ReadFile
GetModuleFileNameW
DeleteFileW
GetTempPathW
LockResource
CloseHandle
user32
wsprintfW
shell32
SHGetSpecialFolderPathW
CommandLineToArgvW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 331KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ