Static task
static1
Behavioral task
behavioral1
Sample
81b53005907f601d327b68435fbab385.exe
Resource
win10v2004-20240226-en
General
-
Target
81b53005907f601d327b68435fbab385.exe
-
Size
43.9MB
-
MD5
3ad51951cde0b2a1d702aca4f6314116
-
SHA1
4f09680f2b293d94b9613aa868b9e7da021f7176
-
SHA256
69cc777cef661c3cc627dc6f1a913edb4887d6b1af57facd7d0f202f6488ddd3
-
SHA512
71137e3e9d610e13bcca84378e6d212d9d240c37a6b885c4f9c096aecf8b5b7c30d51006356e2f6c9881589c594f92eab0a01c6d2aaa49f1885aab2b1d31e3cf
-
SSDEEP
786432:I/dD2jnymPYzkeOgPkNWQaev4Y7/9MqNLlpGWx+InVW:IZ2jymP6OikIQZgcVMKpGQp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81b53005907f601d327b68435fbab385.exe
Files
-
81b53005907f601d327b68435fbab385.exe.exe windows:6 windows x64 arch:x64
0b035cc7670814a4e56929c75799e525
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
FreeLibrary
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
OpenClipboard
oleaut32
SysAllocString
imm32
ImmSetCompositionWindow
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateTextureFromFileInMemoryEx
iphlpapi
SetTcpEntry
wininet
InternetReadFile
ntdll
RtlVirtualUnwind
gdiplus
GdipCloneImage
Sections
.text Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.*g) Size: - Virtual size: 26.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.5~[ Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.?D: Size: 43.9MB - Virtual size: 43.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ