Static task
static1
Behavioral task
behavioral1
Sample
5e657ac7cd8cb5d7ae64dbe836e22fa9e9271e0ea8b520ee0b522669ff7c0e12.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
5e657ac7cd8cb5d7ae64dbe836e22fa9e9271e0ea8b520ee0b522669ff7c0e12.exe
Resource
win10v2004-20231023-en
General
-
Target
5e657ac7cd8cb5d7ae64dbe836e22fa9e9271e0ea8b520ee0b522669ff7c0e12
-
Size
3.5MB
-
MD5
b448c48ee9222d392da9c9f0e180760f
-
SHA1
cadecd011a3a0c4fe939a499c9caf4bf4244a356
-
SHA256
5e657ac7cd8cb5d7ae64dbe836e22fa9e9271e0ea8b520ee0b522669ff7c0e12
-
SHA512
d59c76253b12b8d8e6f3e21d9a70dfc196db65cb06898637fdb7441702c524eefdec3345b52e8782540eb38028709fc35410fe1c4de05064b90669423e6157e1
-
SSDEEP
98304:tGiOLbSkL6IwDs403CyOHJMxRig7sR5/lndafZ1hHLv3E:tGbSkORD3O2gIR5/5s7hrv3E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e657ac7cd8cb5d7ae64dbe836e22fa9e9271e0ea8b520ee0b522669ff7c0e12
Files
-
5e657ac7cd8cb5d7ae64dbe836e22fa9e9271e0ea8b520ee0b522669ff7c0e12.exe windows:5 windows x86
c688b291e1908109c55ace35c3670a27
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
IsZoomed
gdi32
BitBlt
advapi32
RegSetValueExA
ole32
DoDragDrop
oleaut32
SystemTimeToVariantTime
msimg32
TransparentBlt
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
wininet
InternetReadFile
oleacc
CreateStdAccessibleObject
gdiplus
GdipCreateBitmapFromStream
imm32
ImmReleaseContext
winmm
mciSendCommandA
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
shell32
SHBrowseForFolderA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.MPRESS1 Size: 2.7MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 751KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ