Static task
static1
Behavioral task
behavioral1
Sample
NewClient.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
NewClient.exe
Resource
win10v2004-20231215-en
General
-
Target
20ba5f3d09a7b6aaefed8e53d4ef200d
-
Size
1.9MB
-
MD5
20ba5f3d09a7b6aaefed8e53d4ef200d
-
SHA1
82b3b6c0f856b9819dee15ddf42b1d10fabf0a68
-
SHA256
98964113d81b4d20b1b224b4f44bca70930e5db35c08fbe5201b4b740afc4c83
-
SHA512
0f9baf95afe4715d3cc4a197f1d778a837040309401250976ae983dafd532f68f29ddc577c3400180a3fb276d3fc5ffa89abd1ab19152b8f1000ecad03e055b7
-
SSDEEP
49152:QDzF/wtTSSwq7L6y/Nh+0Dmu+2jjcX/l4adXaE0iQZhPSVJtYo:QfFyGryVh+05/jYX/Kw0RbaXN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/NewClient.exe
Files
-
20ba5f3d09a7b6aaefed8e53d4ef200d.zip
-
NewClient.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 1.1MB - Virtual size: 10.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
schiyayd Size: 812KB - Virtual size: 812KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hbpfbtgz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE