Start
Static task
static1
Behavioral task
behavioral1
Sample
69d8474303a44d093efcfc5a5ec59a7916d934e66224a87b991d405fa75bb0ca.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
69d8474303a44d093efcfc5a5ec59a7916d934e66224a87b991d405fa75bb0ca.exe
Resource
win10-20240404-en
General
-
Target
69d8474303a44d093efcfc5a5ec59a7916d934e66224a87b991d405fa75bb0ca
-
Size
3.0MB
-
MD5
31ef08b5ca523523aa597babb8a4e621
-
SHA1
976aa81300ad32b16020e4f1b3fa53279311f9cd
-
SHA256
69d8474303a44d093efcfc5a5ec59a7916d934e66224a87b991d405fa75bb0ca
-
SHA512
68778cddea4cd37b30b45bc8bfe117aa9051dea86349f54605962ba0b4ae50f30e78b33a84aba2bfcfe2ae1e38646d43cc3df3ca0fb7e1a4f46bd8c10612d822
-
SSDEEP
49152:aelDvh9E+4dCUMutnwMCJWC3X8oVUVOhEiZd2:aSLhb4dCUMgnwMCL3PhEm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69d8474303a44d093efcfc5a5ec59a7916d934e66224a87b991d405fa75bb0ca
Files
-
69d8474303a44d093efcfc5a5ec59a7916d934e66224a87b991d405fa75bb0ca.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 592KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pqddvbew Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ravookwx Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE