Static task
static1
Behavioral task
behavioral1
Sample
d2352f7f5c4349edd33bec4c30dc257f204177f2b07673f7acd64911665254e5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d2352f7f5c4349edd33bec4c30dc257f204177f2b07673f7acd64911665254e5.exe
Resource
win10v2004-20230915-en
General
-
Target
d2352f7f5c4349edd33bec4c30dc257f204177f2b07673f7acd64911665254e5
-
Size
2.8MB
-
MD5
de0e07c5d10068e89479f193f8a06afa
-
SHA1
d9d6647f5dc8fdef6c04f949ac81eaeea938eebc
-
SHA256
d2352f7f5c4349edd33bec4c30dc257f204177f2b07673f7acd64911665254e5
-
SHA512
9d4f0e730685fcfa2cee550fe2ce2ac843d84cc48c47121c6a1861970a4af827a46ba6c9a935c1c95ffbb7ed66a4dc5c0fb1583bc7b4df9fb08b66a25145d020
-
SSDEEP
49152:nvPO9oemIJkPEGolxjvUcjfkCniq/tJdmhRNtjrPBdhS4pSwO:nHOtmIVlnkOxJghtUwO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2352f7f5c4349edd33bec4c30dc257f204177f2b07673f7acd64911665254e5
Files
-
d2352f7f5c4349edd33bec4c30dc257f204177f2b07673f7acd64911665254e5.exe windows x86
4a953c8bd157b2716295e2979b6789e2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
user32
LoadMenuW
gdi32
SelectObject
msimg32
TransparentBlt
winspool.drv
OpenPrinterA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
shlwapi
PathFindExtensionA
uxtheme
GetThemeSysColor
ole32
OleDestroyMenuDescriptor
oleaut32
SysFreeString
oledlg
ord8
oleacc
AccessibleObjectFromWindow
gdiplus
GdipDrawImageRectI
imm32
ImmReleaseContext
winmm
PlaySoundA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.7MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1002KB - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ