Static task
static1
Behavioral task
behavioral1
Sample
3066d26f09852601c77c099ccc53d2f1aaca48bf24a8c93337a4f2f92519199a.exe
Resource
win7-20231129-en
General
-
Target
3066d26f09852601c77c099ccc53d2f1aaca48bf24a8c93337a4f2f92519199a
-
Size
6.1MB
-
MD5
24da4c2ee24f54492d46147efccb1e97
-
SHA1
3fa11dd4d7cbc69935af7c2ce4314ad3dc7a4ef3
-
SHA256
3066d26f09852601c77c099ccc53d2f1aaca48bf24a8c93337a4f2f92519199a
-
SHA512
27644ad1b222e6c9fff1f05a63ca04c6c304a349af09d05a927ed8d4221d9bbc80f62ec6f08615ac335565286e525654503e1d4bc3d3b389ac074c982f985ff4
-
SSDEEP
98304:is1Vk/ArojMaqYX0WcXkFwl2WoC1T7PAvlpbJBH+0x2emWOn:isH4Akj+h/kFwjRTcf2emr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3066d26f09852601c77c099ccc53d2f1aaca48bf24a8c93337a4f2f92519199a
Files
-
3066d26f09852601c77c099ccc53d2f1aaca48bf24a8c93337a4f2f92519199a.exe windows:6 windows x86 arch:x86
73d661d6ff4d52b9fd77835ace455a67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetDC
gdi32
BitBlt
Sections
.text Size: - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp¨ Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp¨ Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp¨ Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 994KB - Virtual size: 1005KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ