Static task
static1
Behavioral task
behavioral1
Sample
70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9.exe
Resource
win10v2004-20231023-en
General
-
Target
70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9
-
Size
1.0MB
-
MD5
089f5b0c4f704e7aa6dc39c08bcbe462
-
SHA1
32bec282b88e7df32b2315a2724bde5cdb4ddb25
-
SHA256
70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9
-
SHA512
c33fee68eef8adb19fff2684d62ae4e5cb9d76b20c18dff0055987b72277b978acd9c5867560cb7e89e69f8838b8cee79aba771d2700483687c182c914b8389a
-
SSDEEP
12288:9NIjlb56bPTPyvac3oSJMy6tSodW1x2XGhj79wUYYjxdQl4Fj11nkgunWbBSRwW5:7RbyoSJP6tSodW1y+ZwWjxTfMfZDlsHG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9
Files
-
70e2c0eeaab675a1bc14980b26b04b81c64cf9ecb889d2f0d4e2b407789c00f9.exe windows:4 windows x86 arch:x86
b3bfcb6becaf29dba67679770e613826
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord4441
msvcrt
_adjust_fdiv
kernel32
InterlockedDecrement
user32
UpdateWindow
shell32
ShellExecuteA
ole32
CoCreateInstance
oleaut32
CreateErrorInfo
urlmon
URLDownloadToFileA
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
Sections
.text Size: 148KB - Virtual size: 568KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 872KB - Virtual size: 872KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ