Static task
static1
Behavioral task
behavioral1
Sample
d46d1428ad46782577dbc374f6dec733e3fecd1e1b17f1563d9d3093f2e974d1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d46d1428ad46782577dbc374f6dec733e3fecd1e1b17f1563d9d3093f2e974d1.exe
Resource
win10v2004-20230703-en
General
-
Target
d46d1428ad46782577dbc374f6dec733e3fecd1e1b17f1563d9d3093f2e974d1
-
Size
4.8MB
-
MD5
599fa92851eb3d6b18b36934c165164b
-
SHA1
2d7d7ba5c106eb7be88cec8f797a2624c18c561c
-
SHA256
d46d1428ad46782577dbc374f6dec733e3fecd1e1b17f1563d9d3093f2e974d1
-
SHA512
ceef3d05db2d9a82b5a066edbac1d19fe2dc5d623ca1b921860ddff7106bc586111f94e0110afbe576b60ace2f66792081ae332e4731a6700dfcc6a9f1487e3c
-
SSDEEP
98304:sbV9oMbbXvxMIs/7QdSaMtE2nE9jDAgfkSJ++5zsd8MHWM2:sh9oMvJEz+SaMNnE9XA6M
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d46d1428ad46782577dbc374f6dec733e3fecd1e1b17f1563d9d3093f2e974d1
Files
-
d46d1428ad46782577dbc374f6dec733e3fecd1e1b17f1563d9d3093f2e974d1.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
9K51 Size: 4.0MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9K51 Size: 4KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9K51 Size: 780KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9K51 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE