Static task
static1
Behavioral task
behavioral1
Sample
PPIntro.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
PPIntro.exe
Resource
win10v2004-20231222-en
General
-
Target
0859f3070ccc660fe82ceb04573bdb32
-
Size
113KB
-
MD5
0859f3070ccc660fe82ceb04573bdb32
-
SHA1
e455567242a4014e5d2565ba265ad6ed01c1ac33
-
SHA256
5c18d19e8ca317be25dd94575ae4c9280c303ee552f912f309eea419ee9815b8
-
SHA512
ae568afe0dd858f0dff7380b2e9a9b9310ba3cc7bc71f9180166c2eaf740be515b8b81af39cba8af89333178ba441968481fd5578ba1c39dd86091ea8610570f
-
SSDEEP
3072:IIOT44hUAYpvO0HUCGuNLthI9LVeTQkO9RtdJ5+jrjgk:ItT4DAYpvO00othgMTKRr+gk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/PPIntro.exe
Files
-
0859f3070ccc660fe82ceb04573bdb32.zip
-
PPIntro.exe.exe windows:4 windows x86 arch:x86
8e25f6dcacecc4a7e6dcac59bb10f58c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
msvcrt
cos
comctl32
InitCommonControls
user32
GetDC
gdi32
BitBlt
ole32
CoInitialize
winmm
timeGetTime
Sections
.TRS11 Size: - Virtual size: 736KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TRS11 Size: 113KB - Virtual size: 116KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE