Static task
static1
Behavioral task
behavioral1
Sample
ca8b96718b296a08bfd13601db6e1b23d2590fd4f1e366be70d4dc52e4d1c572.exe
Resource
win10-20240404-en
General
-
Target
ca8b96718b296a08bfd13601db6e1b23d2590fd4f1e366be70d4dc52e4d1c572.exe
-
Size
16.2MB
-
MD5
9420c5489e56a1d5d578251f1e2ba83f
-
SHA1
76b8b2df4264f8d19a4f19d55185dd992594b479
-
SHA256
ca8b96718b296a08bfd13601db6e1b23d2590fd4f1e366be70d4dc52e4d1c572
-
SHA512
2f6804b03a36c97b5919cb0072a1fea3e2e2b67ecc585e555176791bf0b8cf9ae2d1155e9508311e7f615c12f300b1e5226f4ae3f596215d4df7c9ad4d8b36fd
-
SSDEEP
196608:+VqCNJtLFtwwmufkiGEyj/UundURp7vTg/CPTDpH9mClN5G1BmwQkyttCZ4KiZgZ:9qJtzPkBJjSLgq/BAWreQ9ngl4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca8b96718b296a08bfd13601db6e1b23d2590fd4f1e366be70d4dc52e4d1c572.exe
Files
-
ca8b96718b296a08bfd13601db6e1b23d2590fd4f1e366be70d4dc52e4d1c572.exe.exe windows:5 windows x86 arch:x86
3e237bb32e899fa40412a8acd5d688d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
wsprintfA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
gdi32
ExtTextOutA
winmm
waveOutWrite
msimg32
GradientFill
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetImageInfo
ws2_32
inet_ntoa
wldap32
ord29
comdlg32
ChooseColorA
wtsapi32
WTSSendMessageW
Sections
.xilou Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xilou Size: 168KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xilou Size: 100KB - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xilou Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xilou Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xilou Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xilou Size: 9.3MB - Virtual size: 9.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE