Static task
static1
Behavioral task
behavioral1
Sample
0949f89677ee3bdd7d52457759ad637e44d31f90102f7d90bdfce1723d740e8c.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0949f89677ee3bdd7d52457759ad637e44d31f90102f7d90bdfce1723d740e8c.exe
Resource
win10v2004-20231023-en
General
-
Target
0949f89677ee3bdd7d52457759ad637e44d31f90102f7d90bdfce1723d740e8c
-
Size
14.5MB
-
MD5
6d4e8bf15ba68d76c39e5f65213f8f53
-
SHA1
58d6be3ddb98cdcc80dc17029f876b3fd10686db
-
SHA256
0949f89677ee3bdd7d52457759ad637e44d31f90102f7d90bdfce1723d740e8c
-
SHA512
9640be34b05dbef49e7b022956506acf087e0e1424219829ada9646ce83c895115568115c5305b41ae00db34161384eb493b58107a70a531ab15c81b8587a597
-
SSDEEP
393216:KlCHnMr/GWsTz2a7Ygjd6ZfngoUQbJSu6Z7OVsZ/D:K9uWU2a7Vjd+YoNVta7JJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0949f89677ee3bdd7d52457759ad637e44d31f90102f7d90bdfce1723d740e8c
Files
-
0949f89677ee3bdd7d52457759ad637e44d31f90102f7d90bdfce1723d740e8c.exe windows:5 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.5MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.6MB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 10.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qmxnnfhp Size: 8.5MB - Virtual size: 8.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sceluwih Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE