Static task
static1
Behavioral task
behavioral1
Sample
da93d355bc2c475f77054ce9a3dc3815d5044036b8e571f2a21108cc63206a0c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
da93d355bc2c475f77054ce9a3dc3815d5044036b8e571f2a21108cc63206a0c.exe
Resource
win10v2004-20230915-en
General
-
Target
da93d355bc2c475f77054ce9a3dc3815d5044036b8e571f2a21108cc63206a0c
-
Size
14.9MB
-
MD5
9cbca9cf28d66bf6d560f36100612e10
-
SHA1
e21f47be1c0088225289df541705b372e1a09dc7
-
SHA256
da93d355bc2c475f77054ce9a3dc3815d5044036b8e571f2a21108cc63206a0c
-
SHA512
b7b20d9f2c1fd47d2300cd7bf857dad9a9849c1c4ca0544faba35697c61aba8619e3c4a7a0387682078b9da493503565a3a0e3c30ba629ccfba888c482ebdd81
-
SSDEEP
196608:V9bfCPWHKHJhqqoJhEKpdqC7MRPOZGax5T3tpGc3hDeyvSzNGHbT78Lv3FjTiJz4:rrC7hqqoJhDn57McLTrhDeiH+6vH8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da93d355bc2c475f77054ce9a3dc3815d5044036b8e571f2a21108cc63206a0c
Files
-
da93d355bc2c475f77054ce9a3dc3815d5044036b8e571f2a21108cc63206a0c.exe windows:4 windows x86
06f56b057fb7a72941667d16b301d852
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
shell32
ShellExecuteW
user32
PeekMessageA
shlwapi
PathFileExistsA
ws2_32
inet_addr
Sections
.text Size: - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 9.4MB - Virtual size: 9.4MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 10KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 444KB - Virtual size: 443KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE