Static task
static1
Behavioral task
behavioral1
Sample
934bc4aa8180ba7af50d69a0b5ad7dea8185eda22a11e7d2bd0f82443e549623.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
934bc4aa8180ba7af50d69a0b5ad7dea8185eda22a11e7d2bd0f82443e549623.exe
Resource
win10v2004-20230703-en
General
-
Target
934bc4aa8180ba7af50d69a0b5ad7dea8185eda22a11e7d2bd0f82443e549623
-
Size
1.3MB
-
MD5
2ce4cb757cb7faf16f288b41122c197b
-
SHA1
cc35e29ee2eee37b0476b8bd8b7c26cb88ed3cb6
-
SHA256
934bc4aa8180ba7af50d69a0b5ad7dea8185eda22a11e7d2bd0f82443e549623
-
SHA512
c1468704a9befd82d2921b4f80da46a76d2c21bc7c52d84087a6be9922fd59fb3e74aabc1b186992caf96081c8f1a92f6fbfce8ff25abc29a98ee720bf767f98
-
SSDEEP
24576:5LJ8kLjANXIP3tOSc3BVOMZtXmKoglwgEZfEqW7DxIjNxBF1b88Od8oPi:3pfsYP3tOSOBYMZtmCvEZfEPDKNL0Dli
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 934bc4aa8180ba7af50d69a0b5ad7dea8185eda22a11e7d2bd0f82443e549623
Files
-
934bc4aa8180ba7af50d69a0b5ad7dea8185eda22a11e7d2bd0f82443e549623.exe windows x86
ec266ce2a27c7073f020c7642a4e8079
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
user32
GetMessageA
gdi32
SetBkColor
shell32
DragFinish
comctl32
InitCommonControlsEx
ole32
CreateStreamOnHGlobal
olepro32
ord251
oleaut32
SafeArrayGetElemsize
atl
ord10
msimg32
AlphaBlend
shlwapi
SHDeleteValueA
winspool.drv
OpenPrinterA
advapi32
RegQueryInfoKeyA
wininet
FindFirstUrlCacheEntryA
oledlg
ord8
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 272KB - Virtual size: 684KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 928KB - Virtual size: 928KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ