Static task
static1
Behavioral task
behavioral1
Sample
02e6dcba1e94346c83a262fde776c630e956a061ec775025e0ba9a17ccc38723.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
02e6dcba1e94346c83a262fde776c630e956a061ec775025e0ba9a17ccc38723.exe
Resource
win10v2004-20230703-en
General
-
Target
02e6dcba1e94346c83a262fde776c630e956a061ec775025e0ba9a17ccc38723
-
Size
3.5MB
-
MD5
0d9e20db9e92fcff484fe15329567d2d
-
SHA1
b283d1cf66ac386b37d3cf7785b7bf6437ab1b80
-
SHA256
02e6dcba1e94346c83a262fde776c630e956a061ec775025e0ba9a17ccc38723
-
SHA512
800a92ed9cfc2c6bd8e2a8384daa35aef2e0680e827de980e712ceda806d15428d9bdf9c863ae2e08a5c10fde12fd88d70872286d383c929fddc1d2e6cb7c1a1
-
SSDEEP
49152:QdCGfbcO1CsyFAoSSi03dbVMmQpOLKoIKM41VAJXZW+R5GEUMvC72tbCjUn+FPDS:1whe5b3XMmQCfR1VwXZQEUMv+jUnS07
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02e6dcba1e94346c83a262fde776c630e956a061ec775025e0ba9a17ccc38723
Files
-
02e6dcba1e94346c83a262fde776c630e956a061ec775025e0ba9a17ccc38723.exe windows x86
ab472bdb8dda700adcda2438dea10aca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsA
user32
LoadIconA
gdi32
GetTextMetricsA
winmm
waveOutRestart
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
inet_ntoa
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.2MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 988KB - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ