Static task
static1
Behavioral task
behavioral1
Sample
97cd484dc2e070b9d5a6146c01c5130c93f96a2854ee47fb931f369d6e6e9bba.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
97cd484dc2e070b9d5a6146c01c5130c93f96a2854ee47fb931f369d6e6e9bba.exe
Resource
win10v2004-20230915-en
General
-
Target
97cd484dc2e070b9d5a6146c01c5130c93f96a2854ee47fb931f369d6e6e9bba
-
Size
565KB
-
MD5
49848ae7fd2cdf8311b728c5730d3e85
-
SHA1
5720a1bed5cb4e7e2861a46292d412895822c040
-
SHA256
97cd484dc2e070b9d5a6146c01c5130c93f96a2854ee47fb931f369d6e6e9bba
-
SHA512
e43942565ba65fda792c9ee67eba22c321c88de7c5dd0492c0960f576d1a23aa5fb55c99a5b456be2fee943f34398266072035fe30fff9e7e4bc158ce9d1b51f
-
SSDEEP
12288:4s9gBs1wrnm/cswhqvv7BL4D2ynEl/DvUQHX9Gk4CJgecug+drx:4s9g/mUsw4v5Uot+k4beYw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 97cd484dc2e070b9d5a6146c01c5130c93f96a2854ee47fb931f369d6e6e9bba
Files
-
97cd484dc2e070b9d5a6146c01c5130c93f96a2854ee47fb931f369d6e6e9bba.exe windows:4 windows x86
8696da4845ea5e584d4188efec1900bc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegCloseKey
comctl32
ImageList_Add
gdi32
BitBlt
user32
ActivateKeyboardLayout
ole32
CLSIDFromString
oleaut32
CreateErrorInfo
Sections
.text Size: 382KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 177KB - Virtual size: 248KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE