Static task
static1
Behavioral task
behavioral1
Sample
24ca467f398c64c1f70011ffc53598f2f09971998e08e2267f39f06776afbb15.exe
Resource
win7-20231215-en
General
-
Target
24ca467f398c64c1f70011ffc53598f2f09971998e08e2267f39f06776afbb15
-
Size
6.3MB
-
MD5
0d2d76945a575efb04566140058a4437
-
SHA1
b3f2f36ea7e1c25d01f87a85bc99b054cee61d0c
-
SHA256
24ca467f398c64c1f70011ffc53598f2f09971998e08e2267f39f06776afbb15
-
SHA512
07260a020c47c422f95b9e1e7a5a0ea9f5f24ff350bdbce24a5320058dea220c1432248c74e1da84e45a11dcee006271a831ac2ba64cf9eee4265d02ac8712e5
-
SSDEEP
196608:dpXmHaYl1PwFlnYt58Vz+KwwvQrx9vDj:/2HaYlxwFlYIcTwC7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24ca467f398c64c1f70011ffc53598f2f09971998e08e2267f39f06776afbb15
Files
-
24ca467f398c64c1f70011ffc53598f2f09971998e08e2267f39f06776afbb15.exe windows:6 windows x86 arch:x86
d90735248820f131558edc3dab2d3793
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
GetSystemMetrics
gdi32
CreateCompatibleBitmap
advapi32
RegCloseKey
shell32
SHGetFolderPathA
wininet
HttpOpenRequestA
gdiplus
GdiplusStartup
ws2_32
closesocket
wtsapi32
WTSSendMessageW
Sections
.MPRESS1 Size: 6.2MB - Virtual size: 12.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE