Static task
static1
Behavioral task
behavioral1
Sample
631defcfe435bb021b408b39bc9130cc351d698791172f6c9db6050cf3db1702.exe
Resource
win7-20230712-en
General
-
Target
631defcfe435bb021b408b39bc9130cc351d698791172f6c9db6050cf3db1702.exe
-
Size
6.6MB
-
MD5
238509ed1c8581aae3e57ea7de78ffd2
-
SHA1
72f5e44557541019d1303533c0063b1a739872ee
-
SHA256
631defcfe435bb021b408b39bc9130cc351d698791172f6c9db6050cf3db1702
-
SHA512
d9e396e5a1f7ab3050fa551fde087e4567e935340e119dc77df063af994229be0f84174fa2551f004c52aa16d37091899142b18c869e9a7a90edebfe8ebe7162
-
SSDEEP
196608:V0VBjQzX+gwvGJYwSRMBu+oKyV+r05N4+K/:KceGSNebyUQEt/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 631defcfe435bb021b408b39bc9130cc351d698791172f6c9db6050cf3db1702.exe
Files
-
631defcfe435bb021b408b39bc9130cc351d698791172f6c9db6050cf3db1702.exe.exe windows x86
36d75ecd818f0c5cde41f4ee2b1e9296
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ReleaseDC
CharUpperBuffW
gdi32
BitBlt
advapi32
GetTokenInformation
shell32
SHFileOperationW
ole32
CreateStreamOnHGlobal
crypt32
CryptUnprotectData
wininet
InternetSetOptionA
ws2_32
send
Sections
.text Size: - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.;yj Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.1+4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.?hn Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 407KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ