Static task
static1
Behavioral task
behavioral1
Sample
87e3d36c4393174ac39112be632d2056.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
87e3d36c4393174ac39112be632d2056.exe
Resource
win10v2004-20231215-en
General
-
Target
87e3d36c4393174ac39112be632d2056
-
Size
880KB
-
MD5
87e3d36c4393174ac39112be632d2056
-
SHA1
937d72409a8aa93eab6d1b8b9b85fd330cde86d3
-
SHA256
e7e898c0d666755ae9814bb51f15d1718b64113cd22df603906495a93bef9dce
-
SHA512
427f1606aa0b91dfc78bbd08a3d87e78e2076f8af93e3a64d1ca41f1e8228b283e3c79776e7107eea070533cb2d1085d22ef7394ba269018d4419a0e5c0e0420
-
SSDEEP
24576:U1vGGeaGnQWPMzBk80ApFbNhVxaPFo7QzHVa:c86BfFlxaP6W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87e3d36c4393174ac39112be632d2056
Files
-
87e3d36c4393174ac39112be632d2056.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 40KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1012KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gtapptln Size: 820KB - Virtual size: 820KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jknmpvmh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE