Static task
static1
Behavioral task
behavioral1
Sample
da2ce3dcd582a45a62c91190c6485aab98ccd21a65055e05146c87c148103863.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
da2ce3dcd582a45a62c91190c6485aab98ccd21a65055e05146c87c148103863.exe
Resource
win10v2004-20230915-en
General
-
Target
da2ce3dcd582a45a62c91190c6485aab98ccd21a65055e05146c87c148103863
-
Size
6.0MB
-
MD5
2025738f8fa966dfa46a6863e748a554
-
SHA1
e340767d977b7878d9cf0e2fc39e10c6f40d53ea
-
SHA256
da2ce3dcd582a45a62c91190c6485aab98ccd21a65055e05146c87c148103863
-
SHA512
5af03695a675567e355ea6a39c7114b47208c712c712bc013bec089c60890fac11f91248936b32298979328639660f2fa733f1a37c0ddc356b7c8d057277768c
-
SSDEEP
98304:lwtpXxJjbhZ+cWN1rPMkLAbt6DgAqmuX+/nX2fabbfA+MuUUZOro1zWMxIIQr:mJzjbHe/0pfuO0GObpMu1Or8WMxIPr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da2ce3dcd582a45a62c91190c6485aab98ccd21a65055e05146c87c148103863
Files
-
da2ce3dcd582a45a62c91190c6485aab98ccd21a65055e05146c87c148103863.exe windows:4 windows x86
e304217fc16c011615a0ec22783cbfae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 292KB - Virtual size: 523KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 5.6MB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 28KB - Virtual size: 341KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 48KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE