Static task
static1
Behavioral task
behavioral1
Sample
82ec2e44c5fd3b83759656cdb76bc4937ddd378bf43d71bd036629cf668c88d7.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
82ec2e44c5fd3b83759656cdb76bc4937ddd378bf43d71bd036629cf668c88d7.exe
Resource
win10v2004-20230703-en
General
-
Target
82ec2e44c5fd3b83759656cdb76bc4937ddd378bf43d71bd036629cf668c88d7
-
Size
3.7MB
-
MD5
047bc22e7b21e9de9b62352748a4c7aa
-
SHA1
260b0bca0ea25cabe6d85a8748d1bfde47067f2f
-
SHA256
82ec2e44c5fd3b83759656cdb76bc4937ddd378bf43d71bd036629cf668c88d7
-
SHA512
c25cc0e4a04edc7c6e5569f6a338d099420ede06bd2779cbed57aff1f3950a47ed423e311ec8805fe3c09bd9c523038a25fde534070332a4e4a5361bb6d6e796
-
SSDEEP
49152:7NvSaQ9qGwoknsrqeHVFxWtZUrodTFdD9Hktypg5/2TZwW7PRfGtqU2fuR2y3C3l:UGGw/Iq8YtGM3Niyp8efTBGUUGugyyV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82ec2e44c5fd3b83759656cdb76bc4937ddd378bf43d71bd036629cf668c88d7
Files
-
82ec2e44c5fd3b83759656cdb76bc4937ddd378bf43d71bd036629cf668c88d7.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 416KB - Virtual size: 960KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 531KB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 591KB - Virtual size: 592KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qiuhmvjb Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
acnazitz Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE