Static task
static1
Behavioral task
behavioral1
Sample
67df91fbb065540e374333587bc9c176.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
67df91fbb065540e374333587bc9c176.exe
Resource
win10v2004-20231222-en
General
-
Target
67df91fbb065540e374333587bc9c176
-
Size
537KB
-
MD5
67df91fbb065540e374333587bc9c176
-
SHA1
61ad124023987b6b1ea131dc0234e15ca8726813
-
SHA256
73f6fc9110b1dc43f74231dfe960dbf41643fc9c6fa70b76367241765a6fb789
-
SHA512
413922b44791339ff7b994cc5b1e010b271bc8f795e2f2152d3a41628e8ba475751685a5b34c20d79bbc35203ce680d86adebd327a1382726153535eeee894fe
-
SSDEEP
6144:c8H77Smxhd7+JG8XXkyBHbODUe6MtvbT/mupHa+x1J0mPwvU/t9mzPzYm4AWgYf5:pr2H7Bq6Md/mopMy9mDyAJC2jnz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67df91fbb065540e374333587bc9c176
Files
-
67df91fbb065540e374333587bc9c176.exe windows:4 windows x86 arch:x86
f9386adf84f80212d2b2e19af3b77641
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CreateStreamOnHGlobal
comctl32
ImageList_SetIconSize
shell32
SHFileOperationA
urlmon
URLDownloadToFileA
comdlg32
GetOpenFileNameA
Sections
CODE Size: 502KB - Virtual size: 11.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE