Static task
static1
Behavioral task
behavioral1
Sample
01edf4899fa69aefe426aecafc05c1eff8520d4fa0d1f54f1c7b2e53b7d149cd.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
01edf4899fa69aefe426aecafc05c1eff8520d4fa0d1f54f1c7b2e53b7d149cd.exe
Resource
win10v2004-20231025-en
General
-
Target
01edf4899fa69aefe426aecafc05c1eff8520d4fa0d1f54f1c7b2e53b7d149cd
-
Size
13.6MB
-
MD5
9b76d1fe01feba8193bb296142634f55
-
SHA1
d53e59df6cb4a0170397db9651294fc993fe915b
-
SHA256
01edf4899fa69aefe426aecafc05c1eff8520d4fa0d1f54f1c7b2e53b7d149cd
-
SHA512
e7c477de2d800963d4d7f7b9ccaf48b3d243035931fd2f7db2f2573efe9b16d72d4d936cbfb9b7e2a52f2c264eff9c44c025388d2f1ee516b35b26ff754e8afc
-
SSDEEP
98304:mkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkn:
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01edf4899fa69aefe426aecafc05c1eff8520d4fa0d1f54f1c7b2e53b7d149cd
Files
-
01edf4899fa69aefe426aecafc05c1eff8520d4fa0d1f54f1c7b2e53b7d149cd.exe windows:5 windows x86
be9fb8e827f76d0bcbb4feccd4781edb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
UpdateResourceA
GetProcAddress
lstrcpy
lstrcpy
GetFileType
AllocConsole
LoadLibraryA
CreateFileA
GetModuleHandleW
CopyFileExA
LoadLibraryExA
OpenJobObjectW
CreateMutexA
GetACP
rsaenh
CPEncrypt
CPDeriveKey
CPCreateHash
CPGenKey
CPDecrypt
shell32
SHFileOperationW
DragFinish
SHGetDesktopFolder
ShellAboutW
SHGetFolderPathW
DragQueryFileW
DllGetClassObject
StrStrA
SHGetDataFromIDListW
ShellMessageBoxA
ShellExecuteW
ctl3d32
Ctl3dGetVer
Ctl3dUnregister
Ctl3dCtlColor
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jdata Size: 1024B - Virtual size: 981B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13.6MB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ