Static task
static1
Behavioral task
behavioral1
Sample
b2073231d0d85cc2a0c56e4096f1b346b5fc6e10a922868620b521be05173504.exe
Resource
win7-20230831-en
General
-
Target
b2073231d0d85cc2a0c56e4096f1b346b5fc6e10a922868620b521be05173504
-
Size
2.0MB
-
MD5
54457e3558ddb1ad7ebc2a3164ec6443
-
SHA1
ea53052473dbb453ccc496d73c65b81b65ee8526
-
SHA256
b2073231d0d85cc2a0c56e4096f1b346b5fc6e10a922868620b521be05173504
-
SHA512
f8f4d1ee77b92dca5d8604b5ab90f6c07dfe14cc640148bd9b37820439ab4f9d59e3436ab3e4f4867e2f500bc723a4e4fb9ab9d3e80433e43bb73a96370d9ff9
-
SSDEEP
24576:D10D8DODLlWlIyKjpL3yWC1pF3aOJ7qhGr+//VEd2LXEsMfWIoVnMGnSMX7eIitc:D10wypWmHjpLgZvGhn2dYXEsNfSayIWc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b2073231d0d85cc2a0c56e4096f1b346b5fc6e10a922868620b521be05173504
Files
-
b2073231d0d85cc2a0c56e4096f1b346b5fc6e10a922868620b521be05173504.exe windows:4 windows x86
49216cbf1bb4d9a34f1c4db3cad1102f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex
advapi32
RegQueryValueExA
RegSetValueExA
user32
GetKeyboardType
CreateWindowExA
kernel32
GetACP
TlsSetValue
lstrlenA
Sleep
GetProcessId
gdi32
UnrealizeObject
version
VerQueryValueA
ole32
CoTaskMemFree
CoInitialize
CoUninitialize
shell32
ShellExecuteExW
ShellExecuteA
ShellExecuteA
comctl32
_TrackMouseEvent
InitCommonControls
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 944KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ