Static task
static1
Behavioral task
behavioral1
Sample
9fa6a4ef6681a6ef4dd642a6ed521dbdfb3b6c32544808febdf883d3f13e8c65.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9fa6a4ef6681a6ef4dd642a6ed521dbdfb3b6c32544808febdf883d3f13e8c65.exe
Resource
win10v2004-20240412-en
General
-
Target
9fa6a4ef6681a6ef4dd642a6ed521dbdfb3b6c32544808febdf883d3f13e8c65
-
Size
1.2MB
-
MD5
3add575c2c91d8c934fc2dfac77c3035
-
SHA1
c54c9db6cb3a3ca136abf55d93781f073dd0ec62
-
SHA256
9fa6a4ef6681a6ef4dd642a6ed521dbdfb3b6c32544808febdf883d3f13e8c65
-
SHA512
4597a7ea3cbbbb1a1a5eab739b0c384030360e68ce4c46c2fd25d41f042ef7a8e60d91e1f28bc137cb2317eaf3484f2fa672379b91c819d7b0624a51bec5c482
-
SSDEEP
24576:arywH8bRs9CIbc+knzrk/I78DsFhNGpWv3npi63i2:aBCs91Vknz4u8wFhNGpWvXpiMR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fa6a4ef6681a6ef4dd642a6ed521dbdfb3b6c32544808febdf883d3f13e8c65
Files
-
9fa6a4ef6681a6ef4dd642a6ed521dbdfb3b6c32544808febdf883d3f13e8c65.exe windows:4 windows x86 arch:x86
3e4757b6c44f364955a909104e3b2b4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
msvcrt
memset
comctl32
InitCommonControls
user32
MessageBoxA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
. Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lol 0 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lol 1 Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 699B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE