Static task
static1
Behavioral task
behavioral1
Sample
557e3b34f8b73beaf8e9fa6203f58e29f6bb68735c5b67153818555474a508c1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
557e3b34f8b73beaf8e9fa6203f58e29f6bb68735c5b67153818555474a508c1.exe
Resource
win10v2004-20230915-en
General
-
Target
557e3b34f8b73beaf8e9fa6203f58e29f6bb68735c5b67153818555474a508c1
-
Size
200KB
-
MD5
b814a46ca1c1004b4b00c6f09eece912
-
SHA1
f4c635c62b1bfceab2fabf7e1cc370982f164c05
-
SHA256
557e3b34f8b73beaf8e9fa6203f58e29f6bb68735c5b67153818555474a508c1
-
SHA512
59b127a77bd727d6ca0bf5a311f3d9d3246c6b035843c72470b03aaa1b0569ebbb7f010ed14606cc8c759c95d3fe225d3db3d30e4c197ae3d2aa91c07630eba1
-
SSDEEP
3072:IaWV4thr9GBNkqfcJMNqDmp4LsFQ6qD7f+IvK6AWA4hE5u7uIQlZG6f3/ENr:IaLto6yyLdPHvx6f5uFSa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 557e3b34f8b73beaf8e9fa6203f58e29f6bb68735c5b67153818555474a508c1
Files
-
557e3b34f8b73beaf8e9fa6203f58e29f6bb68735c5b67153818555474a508c1.exe windows x86
a920c4fd0547e8ea13e8dc7d75bf11ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
gdi32
GetRgnBox
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
shell32
SHAppBarMessage
comctl32
ord17
shlwapi
PathIsUNCA
oledlg
ord8
ole32
CoTaskMemAlloc
oleaut32
SysFreeString
Sections
.text Size: 159KB - Virtual size: 468KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE