Static task
static1
Behavioral task
behavioral1
Sample
0571c3f29fd4189d20c2816ea8490ffb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0571c3f29fd4189d20c2816ea8490ffb.exe
Resource
win10v2004-20231222-en
General
-
Target
0571c3f29fd4189d20c2816ea8490ffb
-
Size
901KB
-
MD5
0571c3f29fd4189d20c2816ea8490ffb
-
SHA1
c5024136488f61e9d46acbcc1ee002c1df31dc21
-
SHA256
91df9b1a8bf6e9df0b6e8bbbe3755864d24dbe0f6632096636e304620fb3b6d0
-
SHA512
28a258483538f22f213da187d26779b632c6bf143e392388f2d29a78475f89982d998f7f25ce98f0eed492002cc40a7f13b62c97a873526032288aed606161ef
-
SSDEEP
24576:rVgdgSkllQjWhcAkjwTi3GY4BzQaBzVzWd+:rVgdg1lSKhczwFRBzVBzdWd+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0571c3f29fd4189d20c2816ea8490ffb
Files
-
0571c3f29fd4189d20c2816ea8490ffb.exe windows:4 windows x86 arch:x86
1928d0e8cf34eb0a5d73797992dbaec4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wininet
InternetOpenW
user32
GetDC
gdi32
SaveDC
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegEnumKeyW
shell32
DragFinish
comctl32
ord17
oledlg
OleUIBusyW
ole32
CoInitialize
oleaut32
SysFreeString
shlwapi
PathIsURLW
Sections
.MPRESS1 Size: 828KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE