Static task
static1
Behavioral task
behavioral1
Sample
57d4a9c81ba9299139bf9c0b0c93524b7f046280eb4cdff47a793ebfc4440aa0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
57d4a9c81ba9299139bf9c0b0c93524b7f046280eb4cdff47a793ebfc4440aa0.exe
Resource
win10v2004-20240226-en
General
-
Target
57d4a9c81ba9299139bf9c0b0c93524b7f046280eb4cdff47a793ebfc4440aa0
-
Size
6.0MB
-
MD5
1999d3db09b90b2c5439be7eadddd374
-
SHA1
5bcb83b2dc2ebcd984371be3ae100d32bdc6b8e4
-
SHA256
57d4a9c81ba9299139bf9c0b0c93524b7f046280eb4cdff47a793ebfc4440aa0
-
SHA512
c5c3331a17bb7058258115e1c04d05d35a92c17b23aca838fd5897e55b578df2789f372854bd8355c6441642abe32ffc534aa2d34391bb9b6f97d670a01d42b1
-
SSDEEP
196608:jZPy++3UK1yqcnuxnCdzVW8ohh2jVPNFI:dPyk7ECxU8o7+FN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57d4a9c81ba9299139bf9c0b0c93524b7f046280eb4cdff47a793ebfc4440aa0
Files
-
57d4a9c81ba9299139bf9c0b0c93524b7f046280eb4cdff47a793ebfc4440aa0.exe windows:5 windows x86 arch:x86
eba8a1c1d7bef7eca17ab91d4e6da615
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
wcscat
advapi32
RegCloseKey
kernel32
GlobalAlloc
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
gdi32
GetTextExtentPoint32W
user32
SetScrollPos
CharUpperBuffW
comctl32
ord17
ole32
OleUninitialize
getuname
GetUName
Sections
.text Size: - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.~O" Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Wvd Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s)o Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ