Static task
static1
Behavioral task
behavioral1
Sample
ca5299973587001a774aa10bb713d8a966e1313ae143f74c6d53c70c53174c06.exe
Resource
win7-20230824-en
General
-
Target
ca5299973587001a774aa10bb713d8a966e1313ae143f74c6d53c70c53174c06
-
Size
13.7MB
-
MD5
f49824e72e834e576ee0b8d5422e9d5f
-
SHA1
954cf4b74cd1d2d0245a01f2506fc3dd4c2b121d
-
SHA256
ca5299973587001a774aa10bb713d8a966e1313ae143f74c6d53c70c53174c06
-
SHA512
0418529304a8b32c1d22a8a38f9eccc567ba50b068dab158083b5fa29007d248fee5dc516aa28fced4de0710a0ac4f266f03ae67fb94db8bef0020514a9e21f6
-
SSDEEP
393216:lVoJYHTpQgJMI0KXh7zd4E7SBU8gWPXCP:XOoTpQgaxmhfdWURrP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca5299973587001a774aa10bb713d8a966e1313ae143f74c6d53c70c53174c06
Files
-
ca5299973587001a774aa10bb713d8a966e1313ae143f74c6d53c70c53174c06.exe windows x86
397865c786c4c8766a601cbd893174f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
comctl32
_TrackMouseEvent
Sections
.text Size: 1.1MB - Virtual size: 26.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE