Static task
static1
Behavioral task
behavioral1
Sample
fe4138223cb5bc8e2e70eae1cb1d8c5a7b5254b5c8f05fd24dd5b26df19e6e01.exe
Resource
win7-20240221-en
General
-
Target
fe4138223cb5bc8e2e70eae1cb1d8c5a7b5254b5c8f05fd24dd5b26df19e6e01
-
Size
126KB
-
MD5
bab21c1631e82fd10620716dc0253eed
-
SHA1
9e93d859a5a49008ef531accee66bd373e3faa18
-
SHA256
fe4138223cb5bc8e2e70eae1cb1d8c5a7b5254b5c8f05fd24dd5b26df19e6e01
-
SHA512
0f901a876180a2a52c8846df5ab0b2a515614c0e179ebe9723b4d8c4da6fa674bb69f073abd1aa0a186fa7b7b2c3d41166cc9b2fef506993a34f01f3aa4b3a3e
-
SSDEEP
1536:3C+ltNKIxyDjxxNA6vOOZsBLD/qMJEAhHmRYHE7mqfm0hw:3C+ltUIs9pO9/jj8YKmz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe4138223cb5bc8e2e70eae1cb1d8c5a7b5254b5c8f05fd24dd5b26df19e6e01
Files
-
fe4138223cb5bc8e2e70eae1cb1d8c5a7b5254b5c8f05fd24dd5b26df19e6e01.exe windows:5 windows x86 arch:x86
99d5d54226d07fdab82543b1f9742b22
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
GetDC
advapi32
RegCloseKey
shell32
ShellExecuteW
ws2_32
gethostbyname
iphlpapi
GetAdaptersAddresses
oleacc
LresultFromObject
gdi32
SaveDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
.text Size: 69KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VSDHGWHD Size: 25KB - Virtual size: 28KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE