Static task
static1
Behavioral task
behavioral1
Sample
d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe
Resource
win10v2004-20231215-en
General
-
Target
d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe.zip
-
Size
754KB
-
MD5
f66ebed484f5934d07e69cae2b21a11c
-
SHA1
e52eeab1359f37575c0011f0b2f12f0e8c43061e
-
SHA256
f7936cf30c8fe4107994ba76ac1ded2e1cc4751a1a8dab0f3f10eb38d4a98e16
-
SHA512
1fd56caeec636c8efc0f54a6c3261b3c320c34e1812d88b4d0e7d4c2b50de7a2032893a08ccc5227b6a8750773a8369c27c6dd98b41b1d14eff8d63e14f84373
-
SSDEEP
12288:3WOpsW4mD4zrsABv1ksheU2c7LZVTcwoo/ugXIl42WH3KEQJztByegGwVBK17Lql:m4BEzIAB1kwZhcwoiY2pKzqNLK17GhT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe
Files
-
d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe.zip.zip
Password: infected
-
d2ffeca3621c0b41001e77cf31058790422df840c98e55ed882a0ac1c5568089.exe.exe windows:6 windows x86 arch:x86
e1beb25e9ba6465f9abcbd6c2d69dff7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
wsprintfW
qt5widgets
??1QMenu@@UAE@XZ
qt5gui
??1QPen@@QAE@XZ
qt5network
??1QHostInfo@@QAE@XZ
qt5core
??1QUrl@@QAE@XZ
rpcrt4
UuidCreate
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
sensapi
IsNetworkAlive
ntdll
NtClose
ws2_32
WSAGetLastError
version
VerQueryValueW
winhttp
WinHttpOpen
advapi32
RegEnumKeyW
shell32
CommandLineToArgvW
Sections
.MPRESS1 Size: 717KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 218KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE