Static task
static1
Behavioral task
behavioral1
Sample
afc847f77160246fa56a4c8047f2cf6e84af38d6192e1ed04eb048262dfae790.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
afc847f77160246fa56a4c8047f2cf6e84af38d6192e1ed04eb048262dfae790.exe
Resource
win10v2004-20230703-en
General
-
Target
afc847f77160246fa56a4c8047f2cf6e84af38d6192e1ed04eb048262dfae790
-
Size
3.5MB
-
MD5
e737e4a7b71026e20ff37615cf3231dd
-
SHA1
94fff0b09fbfbf33c79ca2d8c549dc19bb96f5a3
-
SHA256
afc847f77160246fa56a4c8047f2cf6e84af38d6192e1ed04eb048262dfae790
-
SHA512
c4ed31eafa86aa733a529cdfe5586c48609a322160db4f3219702d41a505e7eaccc21c3cb4f44167950e1ec5074c89d2887272a4667a188cd2c2bf14e12e5731
-
SSDEEP
49152:uswHOV83lBJH38iORr41DbtXjaRN6xKg94YgsH5c6wIxmkiSw8mzjfZ:NmNH38iORr4166xHNtwIx28mzz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afc847f77160246fa56a4c8047f2cf6e84af38d6192e1ed04eb048262dfae790
Files
-
afc847f77160246fa56a4c8047f2cf6e84af38d6192e1ed04eb048262dfae790.exe windows x86
1b76d843e343c89d03abcd590f044811
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeEnableCallback
ToUnicode
DeferWindowPos
oleaut32
SysAllocStringLen
msi
ord30
ord29
shlwapi
AssocIsDangerous
advapi32
CryptDestroyKey
kernel32
ReleaseMutex
CreateMutexW
lstrlenW
GetModuleHandleW
CloseHandle
ReadConsoleA
WTSGetActiveConsoleSessionId
GetBinaryTypeA
GetModuleFileNameA
InitializeCriticalSection
SetFileApisToANSI
AreFileApisANSI
GetVersion
GetModuleHandleA
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.code Size: 468KB - Virtual size: 467KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ