Static task
static1
Behavioral task
behavioral1
Sample
ad24908dac97db1d7dc018b610750efb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad24908dac97db1d7dc018b610750efb.exe
Resource
win10v2004-20240226-en
General
-
Target
ad24908dac97db1d7dc018b610750efb
-
Size
864KB
-
MD5
ad24908dac97db1d7dc018b610750efb
-
SHA1
510dba56dc6cf96b5b5c79226fbccb30f3308305
-
SHA256
8239e0ae4cecefc7c77eb93379662686aecdb36368cc4a93031cd46074481ce9
-
SHA512
32d6163c7c75568908fc14132042b8e9dfbab8a93a698a762a8f727d0399258b65dabdf202ac3b2496f362e01bfc88971c6135127a8dea8e4c2225ea5b5fdca9
-
SSDEEP
24576:HPKohmLOopp+hsjC0pMMq5i0XbCWmx+Bef5oyZA:vKoh++0GvbClYCoc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad24908dac97db1d7dc018b610750efb
Files
-
ad24908dac97db1d7dc018b610750efb.exe windows:4 windows x86 arch:x86
eda52d8e56401f975b604f5085d05cfa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetDC
gdi32
OffsetViewportOrgEx
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegSetValueExA
comctl32
InitCommonControlsEx
shlwapi
PathStripToRootA
oledlg
ord8
ole32
CoTaskMemAlloc
oleaut32
SystemTimeToVariantTime
wininet
InternetCanonicalizeUrlA
psapi
EnumProcessModules
Sections
.text Size: 228KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsc0 Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsc1 Size: 128KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsc2 Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ