Static task
static1
Behavioral task
behavioral1
Sample
d5f2e6f56f68ccfe1d9313e41686726a70188433e094a8398a3ed43e128d2588.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d5f2e6f56f68ccfe1d9313e41686726a70188433e094a8398a3ed43e128d2588.exe
Resource
win10v2004-20231215-en
General
-
Target
d5f2e6f56f68ccfe1d9313e41686726a70188433e094a8398a3ed43e128d2588
-
Size
443KB
-
MD5
b2eea6743eee29e87fa13616a36309a6
-
SHA1
e3e34ac8c02c6cbbf3a26fd77ff95281f4ad0fb0
-
SHA256
d5f2e6f56f68ccfe1d9313e41686726a70188433e094a8398a3ed43e128d2588
-
SHA512
853839268144ee89388f43a945b0173dd57e345280d1ba889303de0b6078d70718cd4de5b89b6d8ca0aeb85eb2cee65f66e37ef547ff3050e0a9bf6bf2e0c54e
-
SSDEEP
6144:3SA1eCN9X6b1Oesf86VQB00fndCI0XuPiEcfvXykGPnlieFWW:3JeCaAE6OfnMfXukvi1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5f2e6f56f68ccfe1d9313e41686726a70188433e094a8398a3ed43e128d2588
Files
-
d5f2e6f56f68ccfe1d9313e41686726a70188433e094a8398a3ed43e128d2588.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 44KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uoybfuge Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
dnxcozyp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE