Static task
static1
Behavioral task
behavioral1
Sample
dc842f939727ab847680ac6e7686a86a8581735c23927b0dd3d59b6fc3e7d129.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dc842f939727ab847680ac6e7686a86a8581735c23927b0dd3d59b6fc3e7d129.exe
Resource
win10v2004-20230915-en
General
-
Target
dc842f939727ab847680ac6e7686a86a8581735c23927b0dd3d59b6fc3e7d129
-
Size
1.3MB
-
MD5
07a25fa78c106c9691130d9241128682
-
SHA1
9f4932e96e7f862c5bc5b52a163ca0cf05fd1e25
-
SHA256
dc842f939727ab847680ac6e7686a86a8581735c23927b0dd3d59b6fc3e7d129
-
SHA512
422c87b451b4523d2fbee621fbf91c25eda73f0bdfe77f645d38a122daab9e8ada993afaa8d551200db39772b00ab8ed18f99421302edde1127d6a76ffad2c60
-
SSDEEP
24576:TjyR/iEOvQ3g6QCc2+tOTawZR4ijRtfP3psYdiSOQa9i2OWfX+7gFcikcCw76rsB:3yg6QCc2+tONT4inP3mZQa9i2rfM8P7n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc842f939727ab847680ac6e7686a86a8581735c23927b0dd3d59b6fc3e7d129
Files
-
dc842f939727ab847680ac6e7686a86a8581735c23927b0dd3d59b6fc3e7d129.exe windows:4 windows x86
6c5a346fa5a1a2edd4df4f6816441f12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ActivateActCtx
advapi32
I_ScGetCurrentGroupStateW
rpcrt4
CreateProxyFromTypeInfo
secur32
SecDeleteUserModeContext
comctl32
MenuHelp
MenuHelp
gdi32
AbortDoc
user32
ActivateKeyboardLayout
mpr
WNetConnectionDialog2
shell32
SHChangeNotifyRegister
msvcrt
??0__non_rtti_object@@QAE@ABV0@@Z
shlwapi
ord1
winmm
ord2
comdlg32
ord100
ole32
PropVariantChangeType
imm32
CtfAImmActivate
lpk
LpkInitialize
usp10
LpkPresent
Sections
.text Size: 1002KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.temp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 355KB - Virtual size: 354KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE