Static task
static1
General
-
Target
2.exe
-
Size
4.4MB
-
MD5
3c293a689d760beb7085d5b74375d368
-
SHA1
265449ca86a22aa0b0e8adef094fd0df9622df31
-
SHA256
629cd66648da73d34726dfe15572793607d49cfa3fc1a0066161353ec120c246
-
SHA512
b8db03c51141a70d93ad03319e9a324b19631bde09ab1e70c9132c3e62ee0c5abb7844d8ff564bf0908ca37c3434b2705633e1e52ce38755d9259b955a582196
-
SSDEEP
98304:UWzziIwP+jNBodS1rqcmccNAYAgLnH2RHZFt:UCi9QzGS1OlN6RHZL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 2.exe
Files
-
2.exe.exe windows x86
a0264d4383d9bab164cc64cf389dd4a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetDC
gdi32
PatBlt
msimg32
AlphaBlend
winspool.drv
GetJobW
advapi32
RegEnumKeyW
shell32
ord680
comctl32
ImageList_AddMasked
shlwapi
PathIsUNCW
uxtheme
IsAppThemed
ole32
DoDragDrop
oleaut32
OleCreateFontIndirect
oledlg
OleUIBusyW
gdiplus
GdipFree
oleacc
LresultFromObject
imm32
ImmGetContext
winmm
PlaySoundW
Sections
.MPRESS1 Size: 4.3MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE