Static task
static1
Behavioral task
behavioral1
Sample
b14f85171127a3404a507283458d4f030045548e8737e7fda78ab25133076a0b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b14f85171127a3404a507283458d4f030045548e8737e7fda78ab25133076a0b.exe
Resource
win10v2004-20230915-en
General
-
Target
b14f85171127a3404a507283458d4f030045548e8737e7fda78ab25133076a0b
-
Size
8.7MB
-
MD5
8442a7baf0d25a661c5046b4e182b087
-
SHA1
daed4d33d424331247525b085a1470d3a4fe1cfb
-
SHA256
b14f85171127a3404a507283458d4f030045548e8737e7fda78ab25133076a0b
-
SHA512
03fdc616f0d457648ef29e7ee5a762eda36f9244d49dab194fea56d8af7a0c986dcb27bad48a21a401b44d5e8bd4a363e2795ed90a00b218ce14af07371aabbd
-
SSDEEP
196608:w8PikyOCON0CzbZOgmddSVNzczZPjd09Oe3WvsIcmlmNTL:XPiQXbZ3AJZ2M5siU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b14f85171127a3404a507283458d4f030045548e8737e7fda78ab25133076a0b
Files
-
b14f85171127a3404a507283458d4f030045548e8737e7fda78ab25133076a0b.exe windows:5 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.2MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ktyamuls Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
izqvpvaf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE