Static task
static1
Behavioral task
behavioral1
Sample
4df4a9b62100e8f6aae1ec4208ce75694ea71297a38f9c0edb5aedc8661254be.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
4df4a9b62100e8f6aae1ec4208ce75694ea71297a38f9c0edb5aedc8661254be.exe
Resource
win10v2004-20230220-en
General
-
Target
4df4a9b62100e8f6aae1ec4208ce75694ea71297a38f9c0edb5aedc8661254be
-
Size
3.1MB
-
MD5
e9d0f2d505fc3423a37ae96708873d80
-
SHA1
5e84b168806dc6cbf55e4cfbd77f529bacd75094
-
SHA256
4df4a9b62100e8f6aae1ec4208ce75694ea71297a38f9c0edb5aedc8661254be
-
SHA512
b6c115f84fa69f8b8dfe889d6372e4b28cec645278a9ed263df926846c2b50524c5ff2d2ef5fea14f484cca0f3afa9db4432b2d8e5a0403393edd065158cff68
-
SSDEEP
49152:CuwYut4XhkNAFfwxt9Z/DT76kKHwRUyX9AuYd3MRwFEm1aNBShQlvYtF1YW:C/4Xloz9Z/n76pQRzNAR5Y6EK6Uj9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4df4a9b62100e8f6aae1ec4208ce75694ea71297a38f9c0edb5aedc8661254be
Files
-
4df4a9b62100e8f6aae1ec4208ce75694ea71297a38f9c0edb5aedc8661254be.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ccghxmyl Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cbraxlkt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE