Static task
static1
Behavioral task
behavioral1
Sample
d7aea09bb1324ea08bd226886dc71f23195638547614ef26301664033848abbd.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d7aea09bb1324ea08bd226886dc71f23195638547614ef26301664033848abbd.exe
Resource
win10v2004-20230703-en
General
-
Target
d7aea09bb1324ea08bd226886dc71f23195638547614ef26301664033848abbd
-
Size
1.6MB
-
MD5
73a95f0d2138e7137ab1a4a71f064a01
-
SHA1
d8415685f76ea5ac7833498635b2643802722bdb
-
SHA256
d7aea09bb1324ea08bd226886dc71f23195638547614ef26301664033848abbd
-
SHA512
f915916187e3dd3b61ade553ff9a1b01425db5594ad3cb9d343c773b3cb293d606fc1bc0a1c297244020f9e0ec0b9e944dbea75083468163020fb4b98832d4ec
-
SSDEEP
49152:0eGqd6dnCo0VnA8bCFK95jw/fjNVHjV315K9:0eG46dL0VpCyjujNVRfK9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7aea09bb1324ea08bd226886dc71f23195638547614ef26301664033848abbd
Files
-
d7aea09bb1324ea08bd226886dc71f23195638547614ef26301664033848abbd.exe windows x86
88a6749fb2425d29312fbbabb7103dee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
SetWindowPos
advapi32
RegOpenKeyExW
comctl32
CreateStatusWindowA
Sections
Size: - Virtual size: 3.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 431KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE