Static task
static1
Behavioral task
behavioral1
Sample
7745426d805c3d299bd3761448ebe8b9cc117d3ee1f6ba89c465c0a5ccec13bb.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7745426d805c3d299bd3761448ebe8b9cc117d3ee1f6ba89c465c0a5ccec13bb.exe
Resource
win10v2004-20230915-en
General
-
Target
7745426d805c3d299bd3761448ebe8b9cc117d3ee1f6ba89c465c0a5ccec13bb
-
Size
3.3MB
-
MD5
b9e779b50aeb915ce9178bb98f513e2c
-
SHA1
7a400d46bf16b06627db064b55408bf53ba18df0
-
SHA256
7745426d805c3d299bd3761448ebe8b9cc117d3ee1f6ba89c465c0a5ccec13bb
-
SHA512
4406d8dcc9acbbccc1356a2e64edc7ee052cd72d5328a8b9503af6c32db70aec148e5c52283128a02971a3f200f795c32913341ef594519a4e46ed786ecd47cd
-
SSDEEP
98304:SEvVTMvvbrWfSzO37H4dpH1LJ3IEU0LLm68hlHeFDWCi2+:SaoLrWS1VV3xUcKqK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7745426d805c3d299bd3761448ebe8b9cc117d3ee1f6ba89c465c0a5ccec13bb
Files
-
7745426d805c3d299bd3761448ebe8b9cc117d3ee1f6ba89c465c0a5ccec13bb.exe windows:5 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 957KB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 138KB - Virtual size: 461KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
icncvmir Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zirrrbai Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE