Static task
static1
Behavioral task
behavioral1
Sample
d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe
Resource
win10v2004-20230915-en
General
-
Target
d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe.zip
-
Size
754KB
-
MD5
340e452b39cc03acfe7589f7ccfdecab
-
SHA1
0183379cdf28d86a5355f850641b3f42a3580af4
-
SHA256
3826bbec66ffb48f3a4dd4d5706be241bd946606568df61846e816c35d513e53
-
SHA512
0bcf4a5bec5333eccb1d1d2bc4dc6b89e00956f1e71199573080a2a492b2b71b179aa16e4b5b6636bdd02616a6631662f53f2e8236bc992c0d4d9152ad597caa
-
SSDEEP
12288:skvW37Pho/ACsTVB1XQvci3YqVlmmIGUufXtYZmrfyNek:DwjT5g0iXNDImrfyNek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe
Files
-
d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe.zip.zip
Password: infected
-
d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe.exe windows:6 windows x86
e1beb25e9ba6465f9abcbd6c2d69dff7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
wsprintfW
qt5widgets
??1QMenu@@UAE@XZ
qt5gui
??1QPen@@QAE@XZ
qt5network
??1QHostInfo@@QAE@XZ
qt5core
??1QUrl@@QAE@XZ
rpcrt4
UuidCreate
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
sensapi
IsNetworkAlive
ntdll
NtClose
ws2_32
WSAGetLastError
version
VerQueryValueW
winhttp
WinHttpOpen
advapi32
RegEnumKeyW
shell32
CommandLineToArgvW
Sections
.MPRESS1 Size: 717KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE