Static task
static1
Behavioral task
behavioral1
Sample
29177425259844d7abed9ad7dd16f69361526772eafe2198ccd3565c3d0402c1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
29177425259844d7abed9ad7dd16f69361526772eafe2198ccd3565c3d0402c1.exe
Resource
win10v2004-20230915-en
General
-
Target
29177425259844d7abed9ad7dd16f69361526772eafe2198ccd3565c3d0402c1
-
Size
7.6MB
-
MD5
a4f3dc7a4629f5a4e5ef5eeba031ea7c
-
SHA1
53feb4abc61ab9d574d8673ad230a95d0760f4c0
-
SHA256
29177425259844d7abed9ad7dd16f69361526772eafe2198ccd3565c3d0402c1
-
SHA512
92038ed507ddada47b801e61d832c8ea963a38f9f038990828cf2617d5a64930f1d52bfb276b2ea96620f665a6bf04e71d7cb8ce2a04da1f120726d8c671ffbc
-
SSDEEP
196608:cEGHdkazV0at3FhmAVtYQkjIMslpam7w/nR1tXZG/cBUg/:cjkCvt1htYQkjIMsPa3fRfXZgcqg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29177425259844d7abed9ad7dd16f69361526772eafe2198ccd3565c3d0402c1
Files
-
29177425259844d7abed9ad7dd16f69361526772eafe2198ccd3565c3d0402c1.exe windows:5 windows x86
071fb6926975c76a92de34bfbe18e358
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetMenuItemCount
CharUpperBuffW
gdi32
CreatePalette
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ord17
ws2_32
recvfrom
comdlg32
GetFileTitleA
Sections
Tomato Size: - Virtual size: 694KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Tomato Size: - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Tomato Size: - Virtual size: 327KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Tomato Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Tomato Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Tomato Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Tomato Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Tomato Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Tomato Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Tomato Size: 552KB - Virtual size: 550KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Tomato Size: 180KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ