Static task
static1
Behavioral task
behavioral1
Sample
24e89c8b8f92e17543f9f85e6b8a846e99e97c972eca604b53c31e9969a9b0ac.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
24e89c8b8f92e17543f9f85e6b8a846e99e97c972eca604b53c31e9969a9b0ac.exe
Resource
win10v2004-20231023-en
General
-
Target
24e89c8b8f92e17543f9f85e6b8a846e99e97c972eca604b53c31e9969a9b0ac
-
Size
6.0MB
-
MD5
09a981344ed5330c69708254e8994da4
-
SHA1
2979aad0069e3ee69ea1065270c1e20dd12fef98
-
SHA256
24e89c8b8f92e17543f9f85e6b8a846e99e97c972eca604b53c31e9969a9b0ac
-
SHA512
5824f273310935bfd1574778b79ad2df665397ae8365536c520dcc38b0cde1d4e644724eb15175a225a45f5b9a16a8a05cdf3aac251a53e059dd2a75efe9ab8f
-
SSDEEP
98304:IRFFEaCd8yX0j/YnW3c4479Ic4JLe8mmswLgBt:IFg8ZwnW389yJLe8tLw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24e89c8b8f92e17543f9f85e6b8a846e99e97c972eca604b53c31e9969a9b0ac
Files
-
24e89c8b8f92e17543f9f85e6b8a846e99e97c972eca604b53c31e9969a9b0ac.exe windows:5 windows x86
5bf0ea9164b09a177f90f864f70d0640
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
IsZoomed
gdi32
BitBlt
advapi32
RegSetValueExA
ole32
DoDragDrop
oleaut32
SystemTimeToVariantTime
msimg32
TransparentBlt
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
wininet
InternetReadFile
oleacc
CreateStdAccessibleObject
gdiplus
GdipCreateBitmapFromStream
imm32
ImmReleaseContext
winmm
mciSendCommandA
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
shell32
SHBrowseForFolderA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.MPRESS1 Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ