Static task
static1
Behavioral task
behavioral1
Sample
8920ebdeb82659bba569154da457ca33b4d269b3e363abe8a4c3ad7108777d8f.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
8920ebdeb82659bba569154da457ca33b4d269b3e363abe8a4c3ad7108777d8f.exe
Resource
win10v2004-20230703-en
General
-
Target
8920ebdeb82659bba569154da457ca33b4d269b3e363abe8a4c3ad7108777d8f
-
Size
828KB
-
MD5
e2fa23410258ed2b74ef6d53a647f08f
-
SHA1
4bfdd28d22c0783e7a6c7a68d7ec05a468c2fbd0
-
SHA256
8920ebdeb82659bba569154da457ca33b4d269b3e363abe8a4c3ad7108777d8f
-
SHA512
d3f441eaed0894530fcc48f9426d320818819d1ac4409dc9cf83afaf38e250ebcecf4d5402908f6e080d6075e99463beeb44356fff5ffac3a95f4d86d9c57255
-
SSDEEP
12288:sr1I8kbbaU8a2E9juLHoB5jq/4Ny3jQJtXao1RhgqTPbwaRVTiJgw0+uxrPOeXGs:u1IR2EJu7QNyTEXjFnTH2deXpWw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8920ebdeb82659bba569154da457ca33b4d269b3e363abe8a4c3ad7108777d8f
Files
-
8920ebdeb82659bba569154da457ca33b4d269b3e363abe8a4c3ad7108777d8f.exe windows x86
e195a3f175e62fc969e161db93d9bc02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
user32
wsprintfA
wininet
FtpOpenFileA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 40KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 768KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ