Static task
static1
Behavioral task
behavioral1
Sample
932e35f9247189941872bd435150261a13048b5e1a6e713d1f4249aaad0faa1b.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
932e35f9247189941872bd435150261a13048b5e1a6e713d1f4249aaad0faa1b.exe
Resource
win10v2004-20231020-en
General
-
Target
932e35f9247189941872bd435150261a13048b5e1a6e713d1f4249aaad0faa1b
-
Size
3.4MB
-
MD5
1c0380958ee9f8d6c91dec612e8e13c2
-
SHA1
0175298cd65b229340b9fb4d873d40ba8a9711b6
-
SHA256
932e35f9247189941872bd435150261a13048b5e1a6e713d1f4249aaad0faa1b
-
SHA512
c361fadced3c9e2549a553c5ca033b107eb1c36144cfcbe71629abb80296af74ecb3e9278cfa98fc2cd0fe862cd849db9dd208748e0bb136f880b064c1baee1d
-
SSDEEP
98304:Yk7/NsM2usw9U81F9tPRLVZNt9kf1VS8r+Vaq:3NsL4UaxxbK1Vl+V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 932e35f9247189941872bd435150261a13048b5e1a6e713d1f4249aaad0faa1b
Files
-
932e35f9247189941872bd435150261a13048b5e1a6e713d1f4249aaad0faa1b.exe windows:4 windows x86 arch:x86
56f37e1c1e7fb8189caa27aca8b00dc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
WSAStartup
user32
GetMenuItemRect
ole32
CLSIDFromProgID
wininet
HttpOpenRequestA
shell32
CommandLineToArgvW
gdi32
CreateCompatibleDC
gdiplus
GdipDrawImageRect
atl
ord42
comctl32
InitCommonControlsEx
shlwapi
StrToIntExW
crypt32
CryptStringToBinaryW
msimg32
AlphaBlend
oleaut32
VariantInit
Sections
.text Size: 3.3MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE