Static task
static1
Behavioral task
behavioral1
Sample
88fb75467125061c4c87a725c9370766a030e2d9fa784ec196d4124dd4badf91.exe
Resource
win7-20240215-en
General
-
Target
88fb75467125061c4c87a725c9370766a030e2d9fa784ec196d4124dd4badf91
-
Size
348KB
-
MD5
4c4b66c6b066b8edb66c349622eafa64
-
SHA1
a52526caa56039bd166e3b411d1e2cd91468a467
-
SHA256
88fb75467125061c4c87a725c9370766a030e2d9fa784ec196d4124dd4badf91
-
SHA512
b2303535b7207ec167c8d3ebda7d010ac0346e73bfbf042cf916e3d07249e84bca4f5d1fc1cd056446ddbf601144cc000654712bbb837ec8f3eb130b73ff6d0f
-
SSDEEP
6144:SaVKyyzwbnUkoiqwcAR92+TdO5CksxCDy9pPbzBHU2ytluF5:g7yUTihR3ONs46pP3BHUbtg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88fb75467125061c4c87a725c9370766a030e2d9fa784ec196d4124dd4badf91
Files
-
88fb75467125061c4c87a725c9370766a030e2d9fa784ec196d4124dd4badf91.exe windows:5 windows x86 arch:x86
04436556038016bdc579850c86f036aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersInfo
Sections
YHGSDW Size: - Virtual size: 424KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YHGSDW Size: 340KB - Virtual size: 344KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE