Start
Static task
static1
Behavioral task
behavioral1
Sample
cd64c502e76fdac255db45732105f8de6fc026e4378a6ca8d52a12a92a7bdf34.exe
Resource
win7-20240221-en
General
-
Target
cd64c502e76fdac255db45732105f8de6fc026e4378a6ca8d52a12a92a7bdf34
-
Size
7.6MB
-
MD5
b1c4801dab5bbfb91a77e11f9480eafe
-
SHA1
b4258b8b88b08c5ec4dbe8fa9f8bfa47b9d707b8
-
SHA256
cd64c502e76fdac255db45732105f8de6fc026e4378a6ca8d52a12a92a7bdf34
-
SHA512
c97f01e7cdbbcc93f5f0fe59b1c1bb8c832c18f20411d0fd5db728ca45bf51401ca13ccddcb2555903dd37bab3648ab08da0559a72f74b42395a96e26262142f
-
SSDEEP
196608:OSHi1EAVcjCNAzKykPULQ81FJWF4QxyubBf15QD0ghG:OSHi1SdBkPUL5BWu6Bf15QQIG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd64c502e76fdac255db45732105f8de6fc026e4378a6ca8d52a12a92a7bdf34
Files
-
cd64c502e76fdac255db45732105f8de6fc026e4378a6ca8d52a12a92a7bdf34.exe windows:6 windows x86 arch:x86
2f93cd80e5dfeca07d7e8b0f35545fb5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
wsprintfA
gdi32
CreateCompatibleBitmap
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
CoInitialize
ws2_32
WSAStartup
crypt32
CryptUnprotectData
shlwapi
PathFindExtensionA
gdiplus
GdipGetImageEncoders
setupapi
SetupDiEnumDeviceInfo
ntdll
RtlUnicodeStringToAnsiString
rstrtmgr
RmStartSession
Exports
Exports
Sections
.MPRESS1 Size: 7.5MB - Virtual size: 16.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE