Static task
static1
Behavioral task
behavioral1
Sample
42576c157ddbef3004faaf387091a495.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42576c157ddbef3004faaf387091a495.exe
Resource
win10v2004-20231222-en
General
-
Target
42576c157ddbef3004faaf387091a495
-
Size
1.5MB
-
MD5
42576c157ddbef3004faaf387091a495
-
SHA1
554184e9802922dbdd260e5af883f56a40455b1c
-
SHA256
3234f5c250ff0aadfce4ef12cd50cc5b73c26636bfe1e8be61d696ebf729817b
-
SHA512
4065254d58bcf02122b01ba0bbfdaa38a9d14b343a4e1b3a2c4e783e3507b8baea4bf781b312de9dcdf07b7e8a7ceb01852740260e9a0569a3d9f227fd47801f
-
SSDEEP
24576:IU60tla1iGXawiFRgSGWyH31Vz/XRYwR0WUIZx1epT+FBgsAzZ1UQVY:IUttla1xiFRgSREHR9epiF74us
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42576c157ddbef3004faaf387091a495
Files
-
42576c157ddbef3004faaf387091a495.exe windows:5 windows x86 arch:x86
8ad7fd218f1c0545c34bd69b90b773d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
dbghelp
MakeSureDirectoryPathExists
psapi
GetModuleFileNameExA
user32
DrawFrameControl
gdi32
GetLayout
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegEnumValueA
shell32
SHAppBarMessage
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
ole32
OleFlushClipboard
oleaut32
SysFreeString
oledlg
ord8
gdiplus
GdipDrawImageRectI
netapi32
Netbios
oleacc
AccessibleObjectFromWindow
wininet
InternetWriteFile
imm32
ImmGetContext
Sections
.text Size: 1.5MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE