Static task
static1
Behavioral task
behavioral1
Sample
70cf9d1b0101e6434f915ab4a71714d00faa5531a73e7b8a67e79c6b6f22c4fc.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
70cf9d1b0101e6434f915ab4a71714d00faa5531a73e7b8a67e79c6b6f22c4fc.exe
Resource
win10v2004-20230703-en
General
-
Target
70cf9d1b0101e6434f915ab4a71714d00faa5531a73e7b8a67e79c6b6f22c4fc.exe
-
Size
10.0MB
-
MD5
9e9027c078b9708556bf3c3aeb8ee5f6
-
SHA1
c51b490cf44ecc104dea94978629acb1367c6ada
-
SHA256
70cf9d1b0101e6434f915ab4a71714d00faa5531a73e7b8a67e79c6b6f22c4fc
-
SHA512
a4fcc47f168edcc08fe77f168e1113543dc9de92df73c1962b8237d3f612f5ae0708fb2fee236d442a64211d91c9ffce3120a7ecdfa2b107c2db295b23d0bf1f
-
SSDEEP
196608:fitqD1V16wBaOZJCJHSL3SQi/6lBccMPAwAKQN1fzKUK:KtMV16+FJxDzlKZAVNBzW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70cf9d1b0101e6434f915ab4a71714d00faa5531a73e7b8a67e79c6b6f22c4fc.exe
Files
-
70cf9d1b0101e6434f915ab4a71714d00faa5531a73e7b8a67e79c6b6f22c4fc.exe.exe windows x86
413f1008824d53fdd595dc784d598598
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnhandledExceptionFilter
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperBuffW
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Zq~ Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.b<> Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.w-6 Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ