Static task
static1
Behavioral task
behavioral1
Sample
ac093967d8802fec5c553157099e1b2ebc77ab3606baec402b5fd765c115a409.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ac093967d8802fec5c553157099e1b2ebc77ab3606baec402b5fd765c115a409.exe
Resource
win10v2004-20231215-en
General
-
Target
ac093967d8802fec5c553157099e1b2ebc77ab3606baec402b5fd765c115a409
-
Size
9.0MB
-
MD5
85bb8f525f9c2c1ef71c11a676e5084a
-
SHA1
5d5f98241388a860ea8a4c63abdb9920de84214c
-
SHA256
ac093967d8802fec5c553157099e1b2ebc77ab3606baec402b5fd765c115a409
-
SHA512
32a835ca142555cc483db418dd1114500a9c0a0c060235d868ee0c444c9c0de60b023fa66c36a4b32dfab4102ec45ba716f7f5d800105180363b041bbdae2894
-
SSDEEP
196608:Jk4gIu4qfpBsgyJSF4JvAEux5bdYYnILjd3Rm21B6gNG5u56zOAp:Jk4guoKIF45Ajxx+53Z8256zOA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac093967d8802fec5c553157099e1b2ebc77ab3606baec402b5fd765c115a409
Files
-
ac093967d8802fec5c553157099e1b2ebc77ab3606baec402b5fd765c115a409.exe windows:5 windows x86 arch:x86
e4d532a13f147a1cc0fc4b48a8028567
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyNameTextA
gdi32
SetTextAlign
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
ExtractIconA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
oledlg
ord8
ole32
OleSetClipboard
oleaut32
VariantChangeType
oleacc
LresultFromObject
Sections
.text Size: 8.9MB - Virtual size: 9.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE