Static task
static1
Behavioral task
behavioral1
Sample
9ce452359c1e01b8d59b230603f69dba03e66b3343c484d12c7753bc1ab61527.exe
Resource
win7-20230712-en
General
-
Target
9ce452359c1e01b8d59b230603f69dba03e66b3343c484d12c7753bc1ab61527
-
Size
1000KB
-
MD5
a3425542fa80e475292fc79dc3c3f57e
-
SHA1
23ae5baada40da51965f3bc473b199038d65e4f7
-
SHA256
9ce452359c1e01b8d59b230603f69dba03e66b3343c484d12c7753bc1ab61527
-
SHA512
db6026a75b154a53be2a8edafbf7185e4763066f4dbda0a047292823f938fa4ff9c7703b898e71c5a2fa8f1f2e389b02cab4a989da362b3e2e459cd0415d5252
-
SSDEEP
24576:VGX0Snbsy9EFlvhYkO5oXx8y02mZ5zh1YBwtmrEjrIBRS3xz6elyS9MSy6:ckBqg+HZyS11Y+YErIB8BuoyfS1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ce452359c1e01b8d59b230603f69dba03e66b3343c484d12c7753bc1ab61527
Files
-
9ce452359c1e01b8d59b230603f69dba03e66b3343c484d12c7753bc1ab61527.exe windows x86
7faf0b83862feb689b86190e96b48b6d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 200KB - Virtual size: 312KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ