Static task
static1
Behavioral task
behavioral1
Sample
84b38ce6221ad9689e11472726f88bfdc05f154af1c49ad197dc81b924e6ad34.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
84b38ce6221ad9689e11472726f88bfdc05f154af1c49ad197dc81b924e6ad34.exe
Resource
win10v2004-20231215-en
General
-
Target
84b38ce6221ad9689e11472726f88bfdc05f154af1c49ad197dc81b924e6ad34
-
Size
6.2MB
-
MD5
34089038298795ef2d9b5ef341be3a59
-
SHA1
152b0e08965181b12a8efa3ac8b05c39776c0cc9
-
SHA256
84b38ce6221ad9689e11472726f88bfdc05f154af1c49ad197dc81b924e6ad34
-
SHA512
2b4bca28f4c95bf6d6e453ad5e8cf4344ec3a3d41d831a0fcbd5e24c5695639c788475959e28e11a8d91a2235a8c5b5e3a0f3d00f19d9b392a3991bdbe679a6d
-
SSDEEP
98304:iCVafrrIuinT1h+O6Iq0EgHHZ09PcudSO5f26b5CGEFfG9DSGeMmiNp64KqEBKd+:Wr527DOgZCPcu723fYLNpym8J4U5o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84b38ce6221ad9689e11472726f88bfdc05f154af1c49ad197dc81b924e6ad34
Files
-
84b38ce6221ad9689e11472726f88bfdc05f154af1c49ad197dc81b924e6ad34.exe windows:5 windows x86 arch:x86
e22f018afb4f3a51ec2b367a1aa6314e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
EmptyClipboard
CharUpperBuffW
gdi32
SelectPalette
winmm
waveOutUnprepareHeader
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
RegisterTypeLi
comctl32
ord17
ws2_32
WSAAsyncSelect
wininet
InternetSetOptionA
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 577KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.(Qn Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.A . Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.09L Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ