Static task
static1
Behavioral task
behavioral1
Sample
961a0ab3cf2378032bd63c8a0e73a75871607ea3eed15bee22678f94e6c867ac.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
961a0ab3cf2378032bd63c8a0e73a75871607ea3eed15bee22678f94e6c867ac.exe
Resource
win10v2004-20230220-en
General
-
Target
961a0ab3cf2378032bd63c8a0e73a75871607ea3eed15bee22678f94e6c867ac
-
Size
1.7MB
-
MD5
546bda2a6d256f90a613e0fb4bc46869
-
SHA1
2abd7cff47685e46d396930b6b4181c1cf5021b2
-
SHA256
961a0ab3cf2378032bd63c8a0e73a75871607ea3eed15bee22678f94e6c867ac
-
SHA512
9b9173986ad1898163ee5e515d0fd5f612b9d674e8d5924f87540404f6a643bbe2d95ae47ff9b7802f02d9e3772ef51537a6fed2119a1f13b339d02de94177fe
-
SSDEEP
49152:dXenbQtHKP2mP2P8E+g3Er3pTml7nNg/:p04qR2WpmJn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 961a0ab3cf2378032bd63c8a0e73a75871607ea3eed15bee22678f94e6c867ac
Files
-
961a0ab3cf2378032bd63c8a0e73a75871607ea3eed15bee22678f94e6c867ac.exe windows x64
63fff8a74b471ef75ea8d4c30481cbab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
oleaut32
VariantCopy
ole32
CoDisconnectObject
shell32
ShellExecuteA
advapi32
RegEnumKeyExA
winspool.drv
OpenPrinterA
gdi32
CopyMetaFileA
winmm
PlaySoundA
imm32
ImmGetContext
oleacc
CreateStdAccessibleObject
gdiplus
GdipSetInterpolationMode
urlmon
URLDownloadToFileA
uxtheme
GetThemeSysColor
shlwapi
PathFindFileNameA
msimg32
TransparentBlt
user32
GetMenuItemInfoA
kernel32
GetModuleFileNameW
Sections
.text Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 693KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 51KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ