Static task
static1
Behavioral task
behavioral1
Sample
9c6bdc6db4bc616c6c5eedee78b7b518eeb82406402a5bb4df7f0b981854a9f7.exe
Resource
win7-20230831-en
General
-
Target
9c6bdc6db4bc616c6c5eedee78b7b518eeb82406402a5bb4df7f0b981854a9f7
-
Size
5.3MB
-
MD5
1d2715694fe50a9ded28f50f4288b696
-
SHA1
d0ca0183b78ec03dd38ee393f6d4c0539afd57f1
-
SHA256
9c6bdc6db4bc616c6c5eedee78b7b518eeb82406402a5bb4df7f0b981854a9f7
-
SHA512
7fd1aabfa7a4c71da49e6d95a853f1a8b531ea8de2ca63bcb245cf4e5549ef1f019edb30fcda30e006b28db1844f69ee283be9b3bfa43084cc7a5d2bd19b9a44
-
SSDEEP
98304:xIZyMfdsowCw+yIM+5imauM5HNnJbzAJ/1ucUYdl1r//Db7aMUewtt9P8053:ElsotX8IIZJPAPucLdlNfwt/Pn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c6bdc6db4bc616c6c5eedee78b7b518eeb82406402a5bb4df7f0b981854a9f7
Files
-
9c6bdc6db4bc616c6c5eedee78b7b518eeb82406402a5bb4df7f0b981854a9f7.exe windows:4 windows x86
c4d1f5a193b3592633b5c924730d7a75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadStringW
shell32
SHGetSpecialFolderPathA
ole32
CoCreateInstance
gdi32
DeleteObject
comctl32
InitCommonControlsEx
wininet
InternetOpenA
gdiplus
GdipSetClipRegion
atl
ord42
shlwapi
PathRemoveFileSpecW
crypt32
CryptStringToBinaryW
msimg32
AlphaBlend
oleaut32
VariantTimeToSystemTime
Sections
.text Size: 5.3MB - Virtual size: 10.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE