Static task
static1
Behavioral task
behavioral1
Sample
524d972f381d6cd207f823a801673f400d3e8725dd346ca44bdfa6a36499c977.exe
Resource
win7-20230712-en
General
-
Target
524d972f381d6cd207f823a801673f400d3e8725dd346ca44bdfa6a36499c977
-
Size
8.0MB
-
MD5
e53479bea8c4eabd029a20d36857dee6
-
SHA1
394e933592c8e0f59c7c391f82fdc65a6ed1ab6d
-
SHA256
524d972f381d6cd207f823a801673f400d3e8725dd346ca44bdfa6a36499c977
-
SHA512
855207394eaf90f49cc3b8f5d97eb79d91a7a4746827466c1fd52ab37215e0d9d00c76ccc4f4c5c77f0111f035144e161a82e02f12e094d6106722ccb5ebf9f0
-
SSDEEP
196608:qk2XqEPNE4T2Lv2I4ojlDSbwlIZBU7VDrRLHnKdX:NelgdlebwyZqFSX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 524d972f381d6cd207f823a801673f400d3e8725dd346ca44bdfa6a36499c977
Files
-
524d972f381d6cd207f823a801673f400d3e8725dd346ca44bdfa6a36499c977.exe windows x86
726d377ce2ea1626dc1f91c80630b003
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
InvalidateRect
CharUpperBuffW
gdi32
BitBlt
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
comctl32
ord17
oledlg
ord8
ole32
OleInitialize
olepro32
ord253
oleaut32
SysAllocStringLen
wininet
InternetQueryDataAvailable
ws2_32
WSAStartup
Sections
.text Size: - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 830KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kT. Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.IaR Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HpI Size: 7.9MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE