Static task
static1
Behavioral task
behavioral1
Sample
444096365969c8b530d92bdcabbf9267d2c42434e8108fe7fec8ec7a91b9158b.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
444096365969c8b530d92bdcabbf9267d2c42434e8108fe7fec8ec7a91b9158b.exe
Resource
win10v2004-20230703-en
General
-
Target
444096365969c8b530d92bdcabbf9267d2c42434e8108fe7fec8ec7a91b9158b
-
Size
340KB
-
MD5
3f3a921aa92ad12317f6830f7bba4d19
-
SHA1
639bff3f8c4d465c2ada2d3ffb0569e59dae04f5
-
SHA256
444096365969c8b530d92bdcabbf9267d2c42434e8108fe7fec8ec7a91b9158b
-
SHA512
3a0b039033a0cd531c4cf35b68f906af6f627d79d6d87b0536be4dcddda3c1d40dcbb13531177286e10a134b7d7b7f018403a5328e15521693af804377f9191a
-
SSDEEP
6144:OBiyWWXUp4dM2Hfge2bIhvzkJ6/ASRESXptD1wPZRwtl2DmS0YWgX:0PUpCM2pkIdkdSRNXJwPZGl2F0YJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 444096365969c8b530d92bdcabbf9267d2c42434e8108fe7fec8ec7a91b9158b
Files
-
444096365969c8b530d92bdcabbf9267d2c42434e8108fe7fec8ec7a91b9158b.exe windows x86
374af62d729377b70fa34449caa41796
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoFreeUnusedLibrariesEx
wininet
RetrieveUrlCacheEntryStreamW
advapi32
LookupPrivilegeNameW
user32
IsWindow
GetWindowRect
ShowCaret
InsertMenuA
GetClipboardFormatNameA
SetCursor
msvcrt
memset
powrprof
IsPwrHibernateAllowed
GetPwrCapabilities
kernel32
LoadLibraryExW
GetModuleHandleW
LoadLibraryA
GetProcAddress
GetModuleHandleA
HeapCreate
HeapWalk
AddConsoleAliasA
GetCurrentConsoleFont
FillConsoleOutputAttribute
EraseTape
GlobalFindAtomA
GlobalAddAtomW
FindFirstFileA
GetProcessAffinityMask
GetLocaleInfoW
EnumSystemLocalesA
GetConsoleCursorInfo
DeleteVolumeMountPointW
SetFileAttributesW
LockFile
LocalFree
winspool.drv
FindNextPrinterChangeNotification
gdi32
GetPaletteEntries
GetBitmapBits
GetDeviceCaps
GetCharWidthW
GetObjectW
Sections
.rda Size: 304KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m5Fih Size: 4KB - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ