Static task
static1
Behavioral task
behavioral1
Sample
24cff17560fe0af3c6302f709ef07ff783d9dd6b9628aa928df6b14d609844ff.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
24cff17560fe0af3c6302f709ef07ff783d9dd6b9628aa928df6b14d609844ff.exe
Resource
win10v2004-20231020-en
General
-
Target
24cff17560fe0af3c6302f709ef07ff783d9dd6b9628aa928df6b14d609844ff
-
Size
13.1MB
-
MD5
2957fb7c7070955f3a96803411cc9639
-
SHA1
abe899246548116d4e86c6e375a1ccdf9e471ae8
-
SHA256
24cff17560fe0af3c6302f709ef07ff783d9dd6b9628aa928df6b14d609844ff
-
SHA512
26a10361e35feb7576b7e0b613311145c732d3eb712e20a8820d4a4906eb04c68adf349cb55baa1098de8c98631a86b1cc0186b260bd825beef10492d42f17e9
-
SSDEEP
196608:g8ERXKtCG5q1bclA+XV2FfKpdqC7MRPOZyx0goTP7038gJ1tXDiW:g4CG5ySAYn57Mnx0g4038EDiW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24cff17560fe0af3c6302f709ef07ff783d9dd6b9628aa928df6b14d609844ff
Files
-
24cff17560fe0af3c6302f709ef07ff783d9dd6b9628aa928df6b14d609844ff.exe windows:4 windows x86
52c17c6b7b8db4864d629726d6c595b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
user32
RegisterClassA
gdi32
SelectClipRgn
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recvfrom
comdlg32
GetFileTitleA
Sections
.text Size: - Virtual size: 537KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.3MB - Virtual size: 5.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 9KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 400KB - Virtual size: 397KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE