Static task
static1
Behavioral task
behavioral1
Sample
d44a6497bcdbfc44ad30b10abd5f9c100aff75b92af58800f8d7e02ed43490aa.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d44a6497bcdbfc44ad30b10abd5f9c100aff75b92af58800f8d7e02ed43490aa.exe
Resource
win10v2004-20230915-en
General
-
Target
d44a6497bcdbfc44ad30b10abd5f9c100aff75b92af58800f8d7e02ed43490aa
-
Size
6.0MB
-
MD5
9083d9882fbd91ff585d68992fad8bf1
-
SHA1
bc9fc265d30e8e3796a5c2ce65e7566add21e857
-
SHA256
d44a6497bcdbfc44ad30b10abd5f9c100aff75b92af58800f8d7e02ed43490aa
-
SHA512
7dccf19121e77baa1c0db51ec11b94ccf4001d79cf3dcc303deccf6ef01e50303511fb9eb1d9248a27d9034c8aeb934a0c1353d37581780285ccdd70aa4c85cb
-
SSDEEP
98304:O6N7p3XDnkXuOUyBDaK7YecYSGKA5p+NW1v2oSeFli6477JzT1h0Rqm+iyq:O6XXDOpBDaK7YeczGn+HoScl1S7JP1yD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d44a6497bcdbfc44ad30b10abd5f9c100aff75b92af58800f8d7e02ed43490aa
Files
-
d44a6497bcdbfc44ad30b10abd5f9c100aff75b92af58800f8d7e02ed43490aa.exe windows:4 windows x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 5.1MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uqbrelpm Size: 836KB - Virtual size: 836KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oqgnwpoy Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE