Static task
static1
Behavioral task
behavioral1
Sample
5575a426b0b6eab8cffb1bb995612c3c5a05da4e4511f548f3641be205c3e087.exe
Resource
win7-20230831-en
General
-
Target
5575a426b0b6eab8cffb1bb995612c3c5a05da4e4511f548f3641be205c3e087
-
Size
1.2MB
-
MD5
a8b76959a847862966f75aa0eb7fb3cc
-
SHA1
2b5144e8c4f32b37bf037474350a0f89a1ad490a
-
SHA256
5575a426b0b6eab8cffb1bb995612c3c5a05da4e4511f548f3641be205c3e087
-
SHA512
94e6ad6f6f9f5382b488723af08ee3d9489f32002f10df580ac5b37c55229c6e5ec7ea4f3c9f00a45b8e78386e5916e1495a79f7a64a3b0bd6bd0038251ac72d
-
SSDEEP
24576:yIBv7Wmft4XU/FklmndZFXTpVy66vqga3iBm/EfSXVNsZtD21uu:yM/f2xmndZFDYvqgrm/EfSXD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5575a426b0b6eab8cffb1bb995612c3c5a05da4e4511f548f3641be205c3e087
Files
-
5575a426b0b6eab8cffb1bb995612c3c5a05da4e4511f548f3641be205c3e087.exe windows:4 windows x86
b3bfcb6becaf29dba67679770e613826
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord4441
msvcrt
_adjust_fdiv
kernel32
InterlockedDecrement
user32
UpdateWindow
shell32
ShellExecuteA
ole32
CoCreateInstance
oleaut32
CreateErrorInfo
urlmon
URLDownloadToFileA
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
Sections
.text Size: 280KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 896KB - Virtual size: 896KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ