Static task
static1
Behavioral task
behavioral1
Sample
0570d4487145a041bf896e14e9837d08.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0570d4487145a041bf896e14e9837d08.exe
Resource
win10v2004-20231215-en
General
-
Target
0570d4487145a041bf896e14e9837d08
-
Size
261KB
-
MD5
0570d4487145a041bf896e14e9837d08
-
SHA1
6a892dc80b71ec6ca6c29b3a719ae6b229fe8500
-
SHA256
e485ebef143b3ab1c56418dd9a5e1efdc39adfe951fd79263558f74e6a113a05
-
SHA512
818599e523487c43d39a0031bdff059162f1e086fd926d018fbbc1c10f3180214cc7725000e504b01869843c72992076633124bb0740e198ab7461bfe834b4d5
-
SSDEEP
6144:RJP/y3TN4VBx+IhQZ0Hi0Gp/2537GIX5DvfmaMnZ3SjqU:RZKJ4VBE1Zgi0Gp/OGE5DvOZdSGU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0570d4487145a041bf896e14e9837d08
Files
-
0570d4487145a041bf896e14e9837d08.exe windows:5 windows x86 arch:x86
daeed0d094fbb0449abc9d7a4acd8c18
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
dnsapi
DnsFree
wininet
InternetOpenA
user32
GetDC
gdi32
SaveDC
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
SHFileOperationA
comctl32
ord17
ole32
OleDraw
oleaut32
SysFreeString
ws2_32
htons
gdiplus
GdipFree
Sections
.MPRESS1 Size: 227KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE