Static task
static1
Behavioral task
behavioral1
Sample
b39e67fdff8dad1a8f64c0d2a01e312cdecd3d64bbedd842b01216cb09f22c65.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b39e67fdff8dad1a8f64c0d2a01e312cdecd3d64bbedd842b01216cb09f22c65.exe
Resource
win10v2004-20240226-en
General
-
Target
b39e67fdff8dad1a8f64c0d2a01e312cdecd3d64bbedd842b01216cb09f22c65.exe
-
Size
164KB
-
MD5
959db6fb58d86b24436a5228fdf1cd01
-
SHA1
fcbcb37c41b3da1c72959bd5bb234217dbdb33fb
-
SHA256
b39e67fdff8dad1a8f64c0d2a01e312cdecd3d64bbedd842b01216cb09f22c65
-
SHA512
618be717e26c8c2d18f16c6711eaab5cd38fea8166d978dece183b2fb2f6d0af20bd592d518cdd06d1607dcfd11815aa1b1bb5be91a3a7c94096e5ba99772699
-
SSDEEP
3072:UQpsjxl96J7HsLvbh4insM3eR7Tbt1iQriHdvp7tl2kUBpxYgw:UQpsjB6JQLvfsMuhPtW9vpxl2vrxi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b39e67fdff8dad1a8f64c0d2a01e312cdecd3d64bbedd842b01216cb09f22c65.exe
Files
-
b39e67fdff8dad1a8f64c0d2a01e312cdecd3d64bbedd842b01216cb09f22c65.exe.exe windows:6 windows x86 arch:x86
eb3adbfdfdb25911eaec8fef643f639b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrNCatW
StrStrIW
StrCatW
StrCpyW
kernel32
SizeofResource
GetCurrentProcess
FindResourceA
GetModuleHandleA
LockResource
GetProcAddress
IsWow64Process
ExitProcess
GetProcessHeap
HeapAlloc
lstrlenW
HeapFree
LoadResource
advapi32
RegSetValueExW
CryptAcquireContextW
CryptGenRandom
RegOpenKeyExW
CryptReleaseContext
ole32
CoInitializeSecurity
CoCreateInstance
CoUninitialize
CoInitializeEx
oleaut32
SysFreeString
VariantInit
SysAllocString
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ