Static task
static1
Behavioral task
behavioral1
Sample
ae2184bc6916f78cdf3168e999cabe9a51b73572e1da855b291a1347abec038a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ae2184bc6916f78cdf3168e999cabe9a51b73572e1da855b291a1347abec038a.exe
Resource
win10v2004-20230915-en
General
-
Target
ae2184bc6916f78cdf3168e999cabe9a51b73572e1da855b291a1347abec038a
-
Size
405KB
-
MD5
070fa3b4c236c99f46f2491e261bebde
-
SHA1
13445df496cd437723ada4c86ec04f438c395c0a
-
SHA256
ae2184bc6916f78cdf3168e999cabe9a51b73572e1da855b291a1347abec038a
-
SHA512
a326e17d6e620ac700eefae94e37fe6fc668f0149da9aa81a68e3e0d62d59c907554bf54d7c6aea85694c5506a093ca982a7246fc988494e8da70beaa31fe135
-
SSDEEP
6144:R9s9QrzHQlCWl2/DDNVcnkMFnW4b8NsDopS981oOj+Eot4jqkblpjludSGi9r+:HaQrDQI5nNVc7TboMAo7qjqapc7Ar
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae2184bc6916f78cdf3168e999cabe9a51b73572e1da855b291a1347abec038a
Files
-
ae2184bc6916f78cdf3168e999cabe9a51b73572e1da855b291a1347abec038a.exe windows:4 windows x86
15a335d1eaf1a89a86aa79758333c7f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
CopyRect
gdi32
DeleteDC
comdlg32
PrintDlgA
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
comctl32
ord17
oledlg
ord8
ole32
CLSIDFromProgID
olepro32
ord253
oleaut32
SysStringLen
wsock32
WSAAsyncSelect
odbc32
ord4
wininet
InternetWriteFile
Sections
.text Size: 391KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE