Static task
static1
Behavioral task
behavioral1
Sample
ad929d87168240062e128ec45f3188555ad144aa5bc4224443a051dd9f0ee1fc.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ad929d87168240062e128ec45f3188555ad144aa5bc4224443a051dd9f0ee1fc.exe
Resource
win10v2004-20230703-en
General
-
Target
ad929d87168240062e128ec45f3188555ad144aa5bc4224443a051dd9f0ee1fc
-
Size
2.8MB
-
MD5
f8a0f6932a4c8ae0e18f38103f080190
-
SHA1
a3b6c6d3c0bf8ad654d83c2a42ce132c25b29c69
-
SHA256
ad929d87168240062e128ec45f3188555ad144aa5bc4224443a051dd9f0ee1fc
-
SHA512
301d65f88b198e473bd2ee6a3fad9027809948e671ec23f6529bcebad03e16c2f94b4a8e6eb03245e736a0536f0ba3158f85f2218bc8aa95daff6b2c7325bbc8
-
SSDEEP
49152:gzdZ+2bMzi7ixP6Y9aQsOWcLa1HH86MzH5OqnBehubGwV:YGwMe7ixP6eawLy86w5OqnBeheGwV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad929d87168240062e128ec45f3188555ad144aa5bc4224443a051dd9f0ee1fc
Files
-
ad929d87168240062e128ec45f3188555ad144aa5bc4224443a051dd9f0ee1fc.exe windows x86
4a953c8bd157b2716295e2979b6789e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
user32
LoadMenuW
gdi32
SelectObject
msimg32
TransparentBlt
winspool.drv
OpenPrinterA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
shlwapi
PathFindExtensionA
uxtheme
GetThemeSysColor
ole32
OleDestroyMenuDescriptor
oleaut32
SysFreeString
oledlg
ord8
oleacc
AccessibleObjectFromWindow
gdiplus
GdipDrawImageRectI
imm32
ImmReleaseContext
winmm
PlaySoundA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.7MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 965KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ