Static task
static1
Behavioral task
behavioral1
Sample
5b860283bfa145e027a4e3e93d6fc0f23670e14faf8a1c8e00f8cbe224ab5a28.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5b860283bfa145e027a4e3e93d6fc0f23670e14faf8a1c8e00f8cbe224ab5a28.exe
Resource
win10v2004-20230703-en
General
-
Target
5b860283bfa145e027a4e3e93d6fc0f23670e14faf8a1c8e00f8cbe224ab5a28
-
Size
4.5MB
-
MD5
3a65a68f123dd79902b3a24ae91d2689
-
SHA1
e97c1e8013a16744efe95ac27cfe33ad9258c46e
-
SHA256
5b860283bfa145e027a4e3e93d6fc0f23670e14faf8a1c8e00f8cbe224ab5a28
-
SHA512
439590c9a8cf733c13c9a6e5c6b94d6268a386d4804cb02861d2317ad73be4d8d858c956939970f31c76a65cc6c57db064c48a14f63a23104ed154e427112417
-
SSDEEP
98304:hXWIpMQl3itc50SeyuORpUb5dfxwab+4xWmc86jyex1B:taQdiC5JekRe5hx+xlNx1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5b860283bfa145e027a4e3e93d6fc0f23670e14faf8a1c8e00f8cbe224ab5a28
Files
-
5b860283bfa145e027a4e3e93d6fc0f23670e14faf8a1c8e00f8cbe224ab5a28.exe windows x86
6eba43153d03b6a5df72bbcc14816765
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyW
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
PostThreadMessageA
advapi32
RegOpenKeyExW
ole32
CoInitialize
shell32
ShellExecuteW
oleaut32
SysFreeString
shlwapi
StrPBrkW
ws2_32
ntohs
urlmon
URLDownloadToFileW
winmm
timeGetTime
Sections
.text Size: 263KB - Virtual size: 262KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.k./ Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
._eO Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.V/1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ