Static task
static1
Behavioral task
behavioral1
Sample
9b44e253548fe1360ecaf3833657b001a958641a6bd4ee3d282f547df73bb339.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9b44e253548fe1360ecaf3833657b001a958641a6bd4ee3d282f547df73bb339.exe
Resource
win10v2004-20231215-en
General
-
Target
9b44e253548fe1360ecaf3833657b001a958641a6bd4ee3d282f547df73bb339
-
Size
83KB
-
MD5
c620e4ae0337c460528022e2610ea415
-
SHA1
3c0ea318a360f27840be9ad3d56cfad20b883215
-
SHA256
9b44e253548fe1360ecaf3833657b001a958641a6bd4ee3d282f547df73bb339
-
SHA512
3feb7c1d6303efb1eeab30d339d93b09db8b2a689bccad72f90240385f568dcdf9043985509cd43eafa0b5e2355f9e30d8a063f2d268649cf9fde09e181c247d
-
SSDEEP
384:V10QPsTEjSDp4f2sJG15356cjDMBytZI4e:V3oEw4fxC5p6i4MZId
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b44e253548fe1360ecaf3833657b001a958641a6bd4ee3d282f547df73bb339
Files
-
9b44e253548fe1360ecaf3833657b001a958641a6bd4ee3d282f547df73bb339.exe windows:4 windows x86 arch:x86
0c5e5b4a52e976b66912332e4acd243a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord4622
ord4424
ord614
ord2625
ord2623
ord290
ord4226
ord2486
ord4003
ord800
ord2764
ord537
ord4080
ord540
ord3811
ord535
ord939
ord860
ord3262
ord3579
ord3237
ord1113
ord3258
ord1114
ord3790
ord3079
ord3825
ord3831
ord3830
ord2976
ord2985
ord3136
ord4465
ord3259
ord3147
ord2982
ord1799
ord825
ord2818
ord823
msvcrt
__p__fmode
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
time
srand
rand
__CxxFrameHandler
__p__commode
??1type_info@@UAE@XZ
_CxxThrowException
kernel32
GetModuleFileNameA
CreateMutexA
OpenMutexA
WinExec
GetSystemDirectoryA
GetModuleHandleA
GetStartupInfoA
LocalFree
lstrlenA
MultiByteToWideChar
GetLastError
InterlockedDecrement
user32
GetSystemMetrics
GetMessageA
TranslateMessage
GetForegroundWindow
DispatchMessageA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
OleRun
oleaut32
SysAllocString
GetErrorInfo
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysFreeString
urlmon
URLDownloadToFileA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE