Static task
static1
Behavioral task
behavioral1
Sample
67c90f2905155bae6cbfe4c7be3bc9414974f381131b4dcd02b9621a5e38a9d1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
67c90f2905155bae6cbfe4c7be3bc9414974f381131b4dcd02b9621a5e38a9d1.exe
Resource
win10v2004-20230915-en
General
-
Target
67c90f2905155bae6cbfe4c7be3bc9414974f381131b4dcd02b9621a5e38a9d1
-
Size
16.9MB
-
MD5
892e16c057c01dc4a4bdd0bf587df9cc
-
SHA1
1e29ff9335346adc21469c4ff0b43c3af221211a
-
SHA256
67c90f2905155bae6cbfe4c7be3bc9414974f381131b4dcd02b9621a5e38a9d1
-
SHA512
4ac46f9aef144cab06788525840d8c7b647f9b9fd7026bd9e5967768504f4d84b451a20e9bae8d1323d01418cd4bfef2fcf99f1b06d58a1777f82948a77113ff
-
SSDEEP
196608:w9WdR9tFs0llvmqTs3UdrH5MFNNcJO2dO3lRQdNCi6iZzd4opzdQtS:1RB9lvtsmSNeOhTfix+Qd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67c90f2905155bae6cbfe4c7be3bc9414974f381131b4dcd02b9621a5e38a9d1
Files
-
67c90f2905155bae6cbfe4c7be3bc9414974f381131b4dcd02b9621a5e38a9d1.exe windows:6 windows x86
564bfbb79ab3f98d1e523c4b41e0aa1b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
msvcrt
memset
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 991KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
[0] Size: 1KB - Virtual size: 696.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zM* Size: 7.2MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.!s4 Size: 1024B - Virtual size: 872B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.*)K Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ