Static task
static1
Behavioral task
behavioral1
Sample
4e497a2974fc86c99642064f4e785f0a5e8ce5b7d5b30c9f2a16522e696b343a.exe
Resource
win7-20240221-en
General
-
Target
4e497a2974fc86c99642064f4e785f0a5e8ce5b7d5b30c9f2a16522e696b343a
-
Size
444KB
-
MD5
cc4a96c280747f6665a3606cd43604f0
-
SHA1
36836c5bff667986ca3cc9fb32930a6f4deb4f7c
-
SHA256
4e497a2974fc86c99642064f4e785f0a5e8ce5b7d5b30c9f2a16522e696b343a
-
SHA512
a8240758cf0589d13fc567ce6f0e6ad030e17b2726174abe1fdf2bbe1d4214392cccf3c9d801a0a45edfc27e136a6ef7fb2f6661f424125afddc7736439d65df
-
SSDEEP
6144:PR3AJJRX6CusizXF52l64hqSv8+Ud5VrUqnYk3JJu9PWcJKTNAXAMwUMJLhg:PRMJysYCl64Aa8+yx5Yk7SPTANgLMI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e497a2974fc86c99642064f4e785f0a5e8ce5b7d5b30c9f2a16522e696b343a
Files
-
4e497a2974fc86c99642064f4e785f0a5e8ce5b7d5b30c9f2a16522e696b343a.exe windows:5 windows x86 arch:x86
99d5d54226d07fdab82543b1f9742b22
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
GetDC
advapi32
RegCloseKey
shell32
ShellExecuteW
ws2_32
gethostbyname
iphlpapi
GetAdaptersAddresses
oleacc
LresultFromObject
gdi32
SaveDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
GGFDSDTY Size: - Virtual size: 584KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GGFDSDTY Size: 436KB - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE