Static task
static1
Behavioral task
behavioral1
Sample
87cbdcc265dce51fa9e758fe7c986043351257188b8c66f6baa6e61aa998cb73.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
87cbdcc265dce51fa9e758fe7c986043351257188b8c66f6baa6e61aa998cb73.exe
Resource
win10v2004-20230915-en
General
-
Target
87cbdcc265dce51fa9e758fe7c986043351257188b8c66f6baa6e61aa998cb73
-
Size
3.8MB
-
MD5
9bab70237f06b88d2e82be70233a8dae
-
SHA1
3580bb85c778ae18f82fec267a8cb0824c7732d1
-
SHA256
87cbdcc265dce51fa9e758fe7c986043351257188b8c66f6baa6e61aa998cb73
-
SHA512
420885e07b47ad72762aff0e15abec95cefc138c702803081816530cdd41205c7c45d82e3e85ec717934aeb94471d3885dfd29c5cd5e5fecc3a22d20cc676bcc
-
SSDEEP
98304:ia8/hLmae8GXONZYtpXzsquEio5PQPRAdqJpXk73T:a/hLqzXYWtzHdHPB8J+T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87cbdcc265dce51fa9e758fe7c986043351257188b8c66f6baa6e61aa998cb73
Files
-
87cbdcc265dce51fa9e758fe7c986043351257188b8c66f6baa6e61aa998cb73.exe windows:5 windows x86
a3da93a915ca94e8451e937ced8afa8f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
user32
SetClipboardData
gdi32
CreateSolidBrush
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegEnumValueA
shell32
DragQueryFileA
comctl32
InitCommonControlsEx
shlwapi
PathIsDirectoryA
ole32
OleGetClipboard
oleaut32
SysAllocStringLen
oledlg
ord8
gdiplus
GdipDrawImageRectI
iphlpapi
GetAdaptersInfo
ws2_32
accept
oleacc
LresultFromObject
wininet
InternetCrackUrlA
imm32
ImmGetOpenStatus
winmm
PlaySoundA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 2.5MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ