Static task
static1
Behavioral task
behavioral1
Sample
4b170cc19ad9dde647f7b3a1a9c9b1f5d7649be931aa0e4fd07904a9cb1bc2b6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4b170cc19ad9dde647f7b3a1a9c9b1f5d7649be931aa0e4fd07904a9cb1bc2b6.exe
Resource
win10v2004-20230915-en
General
-
Target
4b170cc19ad9dde647f7b3a1a9c9b1f5d7649be931aa0e4fd07904a9cb1bc2b6
-
Size
7.0MB
-
MD5
0c9ea3fbb9e9a4b97bd675c8916338ab
-
SHA1
d3836e368deec1b5dc361ea41d00c3ff31e1ace9
-
SHA256
4b170cc19ad9dde647f7b3a1a9c9b1f5d7649be931aa0e4fd07904a9cb1bc2b6
-
SHA512
21eb99b6e460fca2beda9ff045dc2e85118ccb55d00ee00644fbdab81e5fe79838528e8071f6dc5a4c001365742bee37a1ee0fce482ef71cec2df667428a9bbf
-
SSDEEP
196608:yH2fzYF61VIBQkXqdJhj4H/qezUvJJjyvTRwPnL:yWfza61VIBQkXqdJhj4HyezUv7u1wPL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b170cc19ad9dde647f7b3a1a9c9b1f5d7649be931aa0e4fd07904a9cb1bc2b6
Files
-
4b170cc19ad9dde647f7b3a1a9c9b1f5d7649be931aa0e4fd07904a9cb1bc2b6.exe windows:5 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iaejjuku Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ehfxhtxy Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE