Static task
static1
Behavioral task
behavioral1
Sample
689d8c9b24e2aa50ed66bf27edf1e95e56e7ce5a671d4578b6c6b5e00e5e6349.exe
Resource
win7-20240221-en
General
-
Target
689d8c9b24e2aa50ed66bf27edf1e95e56e7ce5a671d4578b6c6b5e00e5e6349
-
Size
323KB
-
MD5
6ee47904067ea2be7fb10c9b49f60587
-
SHA1
3eef8f5b37bf371088ff802c820df46a81e4d635
-
SHA256
689d8c9b24e2aa50ed66bf27edf1e95e56e7ce5a671d4578b6c6b5e00e5e6349
-
SHA512
f741363f03c5f020ca2c43098af15f5c3e6125146cb6783ae7a9420db50e66176c465b2166f66b33a0275ac4ab0b41d4962437fd37a753f0b5f5f759fe8c2734
-
SSDEEP
6144:Zt58sOQf6lghcnBBLf9tQiepbGjhboOBnSusSTUvXBirw/AwFF1/z:ZtisOQf6lXbpt/kbGjhV5AvXxHF/z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 689d8c9b24e2aa50ed66bf27edf1e95e56e7ce5a671d4578b6c6b5e00e5e6349
Files
-
689d8c9b24e2aa50ed66bf27edf1e95e56e7ce5a671d4578b6c6b5e00e5e6349.exe windows:5 windows x86 arch:x86
06ef33a1c45fdabdfa5b6e2e08bce5aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadCursorW
advapi32
RegQueryValueExW
shell32
ShellExecuteA
ws2_32
htonl
iphlpapi
GetAdaptersInfo
Sections
.text Size: 289KB - Virtual size: 404KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE