Static task
static1
Behavioral task
behavioral1
Sample
584676b6d7e88b99678c16a08d8b3f11.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
584676b6d7e88b99678c16a08d8b3f11.exe
Resource
win10v2004-20231215-en
General
-
Target
584676b6d7e88b99678c16a08d8b3f11
-
Size
485KB
-
MD5
584676b6d7e88b99678c16a08d8b3f11
-
SHA1
9dc22e42b7d3107276b1bbc125ee990688c3d4b4
-
SHA256
d0eb6aefe16790646f89d772566e7e86741fccd492c37ae0ef8c32b634ce9bff
-
SHA512
4509efe2cbb0d22eae6065d3ed3c7a22f49be595cf8d6a98f950d004e110a25a06da1d463e2ec34b84dc17c276441cb245f6bf343a8cfe1bfd8ac929f8458ac8
-
SSDEEP
12288:8PjJuu0n0cls4Jd87fsO0GDj6+yr1Us3MUpAW:8PL1c+4Ji0JGn63Ks84A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 584676b6d7e88b99678c16a08d8b3f11
Files
-
584676b6d7e88b99678c16a08d8b3f11.exe windows:4 windows x86 arch:x86
d63f4ffdd81875dfceaf8eabd2e57271
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAAddressToStringW
mpr
WNetGetUniversalNameW
user32
EnumPropsW
gpedit
BrowseForGPO
netapi32
DsGetDcNameW
NetApiBufferFree
kernel32
VirtualAlloc
Beep
GetLastError
lz32
LZClose
advapi32
CloseEventLog
RegCreateKeyExW
IsValidSecurityDescriptor
RegOpenKeyW
RegSetValueExW
RegEnumKeyW
RegDeleteValueW
OpenEventLogW
RegOpenKeyExW
ReportEventW
GetSecurityDescriptorLength
RegCloseKey
RegQueryValueExW
MapGenericMask
RegDeleteKeyW
RegEnumKeyExW
gdi32
GetTextExtentPoint32W
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 418KB - Virtual size: 418KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE