Static task
static1
Behavioral task
behavioral1
Sample
33b4da9d32f39f005fd9c1fee1abcbbccb13e7fa571e6c090c4ff91c9a596e85.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
33b4da9d32f39f005fd9c1fee1abcbbccb13e7fa571e6c090c4ff91c9a596e85.exe
Resource
win10v2004-20230915-en
General
-
Target
33b4da9d32f39f005fd9c1fee1abcbbccb13e7fa571e6c090c4ff91c9a596e85
-
Size
6.0MB
-
MD5
106a0ea954b4d2fe895e7f3904984c79
-
SHA1
a4e03b3dbd027f7a106fddc3f3bc5c522f23a8b9
-
SHA256
33b4da9d32f39f005fd9c1fee1abcbbccb13e7fa571e6c090c4ff91c9a596e85
-
SHA512
39d37e45faa4b77a9079a5cb42a3a6f46cbf66997dd8f207c2e3953c0efa94a3dcb15a19f4945ba4d3c0dc7103733f8cc1b930072e5ba41b591c1842a1ce7764
-
SSDEEP
98304:hwiupU5sOH03amC2pUO4kZczqVFpXa1YHa:hx8U5a35pUO4yoqVFpXa1YHa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33b4da9d32f39f005fd9c1fee1abcbbccb13e7fa571e6c090c4ff91c9a596e85
Files
-
33b4da9d32f39f005fd9c1fee1abcbbccb13e7fa571e6c090c4ff91c9a596e85.exe windows x86
b45050640641b943f516b33288c6c9b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
user32
DestroyWindow
gdi32
DeleteObject
psapi
GetModuleFileNameExW
imagehlp
CheckSumMappedFile
comctl32
InitCommonControlsEx
msvcrt
malloc
iphlpapi
GetInterfaceInfo
advapi32
RegOpenKeyExA
Sections
.text Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 918KB - Virtual size: 920KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ