Static task
static1
Behavioral task
behavioral1
Sample
5215277be7ac7176761b0a445aee0952ca4d3a1bfbad3ac6397296856d2e9551.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5215277be7ac7176761b0a445aee0952ca4d3a1bfbad3ac6397296856d2e9551.exe
Resource
win10v2004-20230915-en
General
-
Target
5215277be7ac7176761b0a445aee0952ca4d3a1bfbad3ac6397296856d2e9551
-
Size
3.5MB
-
MD5
30f7cec3263a7d52d60ad5ed0f025241
-
SHA1
4cd0589f8680b5d8bc2092af453d3fb5609d056b
-
SHA256
5215277be7ac7176761b0a445aee0952ca4d3a1bfbad3ac6397296856d2e9551
-
SHA512
9c0ac23ba50de121bbc33ef3c72a0afbb3d531c64136aeca304158cf258e2a59d43f3452caf45a353463dd4597665da13be06ea0807192367c0541b43aa66765
-
SSDEEP
98304:RNBcWEDRyS2jZA/l2KR3D5DoBoZFi/KbXl1hA6lP:NaDajil2KRKBci/KbXCg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5215277be7ac7176761b0a445aee0952ca4d3a1bfbad3ac6397296856d2e9551
Files
-
5215277be7ac7176761b0a445aee0952ca4d3a1bfbad3ac6397296856d2e9551.exe windows:6 windows x64
be66b3e122f183bf5ee19a17edcf77ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetVolumeInformationW
user32
InvalidateRect
gdi32
CreateHatchBrush
advapi32
RegDeleteValueW
shell32
ShellExecuteW
ole32
OleInitialize
oleaut32
SafeArrayDestroy
comctl32
InitCommonControlsEx
msimg32
AlphaBlend
shlwapi
PathFindFileNameW
uxtheme
DrawThemeBackground
oledlg
OleUIBusyW
gdiplus
GdipCreateFromHDC
oleacc
CreateStdAccessibleObject
imm32
ImmReleaseContext
winmm
PlaySoundW
winspool.drv
ClosePrinter
iphlpapi
GetInterfaceInfo
msvcrt
_wcsnicmp
psapi
GetMappedFileNameW
Sections
.text Size: 2.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ