Static task
static1
Behavioral task
behavioral1
Sample
511c7c75b3bbbe6cf9f51a66fa517fb6080d88df5341b2ff8f2fd8ce9f20bf3f.exe
Resource
win7-20231020-en
General
-
Target
511c7c75b3bbbe6cf9f51a66fa517fb6080d88df5341b2ff8f2fd8ce9f20bf3f
-
Size
1.1MB
-
MD5
16e682ecb092a2a68b5637187fcb8364
-
SHA1
9172da2284eedc738ee4211ac42f11f88870bcdc
-
SHA256
511c7c75b3bbbe6cf9f51a66fa517fb6080d88df5341b2ff8f2fd8ce9f20bf3f
-
SHA512
a2e4fb994c578cc0dba333b40931f2e6052399f390c397f715b7147dd8bdac3bb71ffce5425737584562a32ff250d851c7192fa91f7bcbe94bf505c0ba249236
-
SSDEEP
24576:08vowZZzUQLw59SaQ1v6SCTFuUIb9z80tPR16VwixTfDy:08wuBH0zoyS6/ImUzs1S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 511c7c75b3bbbe6cf9f51a66fa517fb6080d88df5341b2ff8f2fd8ce9f20bf3f
Files
-
511c7c75b3bbbe6cf9f51a66fa517fb6080d88df5341b2ff8f2fd8ce9f20bf3f.exe windows:4 windows x86
b3bfcb6becaf29dba67679770e613826
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord4441
msvcrt
_adjust_fdiv
kernel32
InterlockedDecrement
user32
UpdateWindow
shell32
ShellExecuteA
ole32
CoCreateInstance
oleaut32
CreateErrorInfo
urlmon
URLDownloadToFileA
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
Sections
.text Size: 148KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 968KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ