Static task
static1
Behavioral task
behavioral1
Sample
9c501f6968ca97d84906d37a8ea4b30978ec491824ad4439408aefada79ee948.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9c501f6968ca97d84906d37a8ea4b30978ec491824ad4439408aefada79ee948.exe
Resource
win10v2004-20240226-en
General
-
Target
9c501f6968ca97d84906d37a8ea4b30978ec491824ad4439408aefada79ee948
-
Size
5.9MB
-
MD5
b8e2de40dab6afcab7d8dfe33f0234e2
-
SHA1
1445fa7442314bff7c59892cf1655027cde35aa5
-
SHA256
9c501f6968ca97d84906d37a8ea4b30978ec491824ad4439408aefada79ee948
-
SHA512
76511ab565dfa301f809fdeef69c2d7e2758410e66a2ce508c2fe8abcbabe6062748fc26a63c850a23bebe63d49aa4b411a83b12b066aff55c8564b4c20a4058
-
SSDEEP
98304:78uqyrNn/tr4PhxC9HXvaT1uOJfGGSPU8Jf2aC8A+hJqt5XnHktaIVdWhyVc:Syd/tkxCxCBuOJwJHC8bYtZnEAIVTK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c501f6968ca97d84906d37a8ea4b30978ec491824ad4439408aefada79ee948
Files
-
9c501f6968ca97d84906d37a8ea4b30978ec491824ad4439408aefada79ee948.exe windows:5 windows x86 arch:x86
46d2c20913d813a5bd73bd4cf343cd67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreatePropertySheetPageA
kernel32
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SendMessageA
CharUpperBuffW
gdi32
DeleteObject
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CoInitialize
msvcr71
_acmdln
Sections
.text Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.O}N Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�$�٣uP Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c*4 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.`k2 Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.[<@ Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ