Static task
static1
Behavioral task
behavioral1
Sample
430544d5b561b4ea05853ce841c0bc7f.exe
Resource
win7-20231020-en
General
-
Target
430544d5b561b4ea05853ce841c0bc7f.exe
-
Size
140KB
-
MD5
430544d5b561b4ea05853ce841c0bc7f
-
SHA1
9a6c07577899250ba271126aab64019e06e670bd
-
SHA256
5a66d3f2b4216a41a2fb6a90c41775f49bd9df5d4bbda72b7fb65897f69949d4
-
SHA512
cbe9af6490dc2932aaec51aa0587633297683720c5ca073ce562992553da28638387352fee612ba87eb2feb3853a74aea2f1881a9dd82349f86a8e43d742e061
-
SSDEEP
1536:2xo3t29IAhUANTAfLocwaIG0rByDDqG+UKLnuvUYY9TRWEhVnLaMjF04q0JEGhMx:J8VUcTAWG8HGCnuvqTAGdXqQ63h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 430544d5b561b4ea05853ce841c0bc7f.exe
Files
-
430544d5b561b4ea05853ce841c0bc7f.exe.exe windows:5 windows x86 arch:x86
99d5d54226d07fdab82543b1f9742b22
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
GetDC
advapi32
RegCloseKey
shell32
ShellExecuteW
ws2_32
gethostbyname
iphlpapi
GetAdaptersAddresses
oleacc
LresultFromObject
gdi32
SaveDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
.text Size: 76KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xxvdfgdg Size: 25KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE