Static task
static1
Behavioral task
behavioral1
Sample
04a253e2cfb7695bd10f2e1ef0c6ed27d2e896a7d4af23a1b154986ca3651899.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
04a253e2cfb7695bd10f2e1ef0c6ed27d2e896a7d4af23a1b154986ca3651899.exe
Resource
win10v2004-20231020-en
General
-
Target
04a253e2cfb7695bd10f2e1ef0c6ed27d2e896a7d4af23a1b154986ca3651899
-
Size
9.6MB
-
MD5
fe4eb8fff772e0a0fe22964a72bd5aac
-
SHA1
68384f786c5685fcfbf81c4e6cdf1775d09df5f8
-
SHA256
04a253e2cfb7695bd10f2e1ef0c6ed27d2e896a7d4af23a1b154986ca3651899
-
SHA512
940b6e38452897de28d5fee2eeae46fbee0b01a10625ffaba319dc756c24a5089033d1a74d9cd06eaa53494e1331fb1aeaf0c1378779a451c0c4ceeff218d9fe
-
SSDEEP
196608:53EFUQzLJznRTncWjRWAK+BO0ldGdEv+7cqAvHaGcOq10g4:50FUQhzRr9jRimNvAc+V134
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04a253e2cfb7695bd10f2e1ef0c6ed27d2e896a7d4af23a1b154986ca3651899
Files
-
04a253e2cfb7695bd10f2e1ef0c6ed27d2e896a7d4af23a1b154986ca3651899.exe windows:5 windows x86 arch:x86
d39001d2813b450e2ffb72ddcd966c2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
CharUpperA
gdi32
CreateCompatibleBitmap
msimg32
TransparentBlt
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
DragQueryFileA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
uxtheme
GetWindowTheme
ole32
OleGetClipboard
oleaut32
LoadRegTypeLi
oledlg
ord8
winmm
PlaySoundA
gdiplus
GdipSetInterpolationMode
oleacc
AccessibleObjectFromWindow
imm32
ImmGetContext
Sections
.text Size: 9.5MB - Virtual size: 14.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE