Static task
static1
Behavioral task
behavioral1
Sample
dfaec40a2b1c69323ba20b6c91f7d2697080921fb2e698e7a8df1abb14b8b7d4.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
dfaec40a2b1c69323ba20b6c91f7d2697080921fb2e698e7a8df1abb14b8b7d4.exe
Resource
win10v2004-20230703-en
General
-
Target
dfaec40a2b1c69323ba20b6c91f7d2697080921fb2e698e7a8df1abb14b8b7d4
-
Size
14.7MB
-
MD5
911da2ae0c3fd1644da45c8243a522ed
-
SHA1
63f128a4d43a8db068c455295fe0a98ebc1f85e0
-
SHA256
dfaec40a2b1c69323ba20b6c91f7d2697080921fb2e698e7a8df1abb14b8b7d4
-
SHA512
00b13dd696384c469885f038178d01635ce3f920782204d492ce45b3db9cc77bf25bf7acd29ab04b5b40a3312f3af48860a41dfdd5f19e4e7c8b4012179a9910
-
SSDEEP
393216:ocZg26UtBwV4ZCuZxUVg5DZRGKGujoU5p3:E26oBweA4xUVgZMKlj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfaec40a2b1c69323ba20b6c91f7d2697080921fb2e698e7a8df1abb14b8b7d4
Files
-
dfaec40a2b1c69323ba20b6c91f7d2697080921fb2e698e7a8df1abb14b8b7d4.exe windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 12.3MB - Virtual size: 15.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xbpllkub Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lmhdcmux Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE