Static task
static1
Behavioral task
behavioral1
Sample
f373053693f79f55cd7b6399abdd7f27b64534d4ec93bc1e431e7ae7695f32cf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f373053693f79f55cd7b6399abdd7f27b64534d4ec93bc1e431e7ae7695f32cf.exe
Resource
win10v2004-20230915-en
General
-
Target
f373053693f79f55cd7b6399abdd7f27b64534d4ec93bc1e431e7ae7695f32cf
-
Size
8.6MB
-
MD5
57a37a471eb6da7939d82b768e6edfe5
-
SHA1
732bb51ab04f5b4ebb75e898aaeb499b1f7910a7
-
SHA256
f373053693f79f55cd7b6399abdd7f27b64534d4ec93bc1e431e7ae7695f32cf
-
SHA512
3efec82e704f4f883e1b7c6cff79ed624071ed21d24f6742d8455e0ec5e30a5bec7cffb60abebf53b9b0851bac50817d67eca4c53e1587c3692b111087cf7e2e
-
SSDEEP
196608:wViVNNEsXYigx1QMlc/xdbSthH/p1gnS5SI3:ww3OMf8QGczwdR1gnS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f373053693f79f55cd7b6399abdd7f27b64534d4ec93bc1e431e7ae7695f32cf
Files
-
f373053693f79f55cd7b6399abdd7f27b64534d4ec93bc1e431e7ae7695f32cf.exe windows:5 windows x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 8.6MB - Virtual size: 9.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE