Static task
static1
Behavioral task
behavioral1
Sample
7eaa919c50e3132fb83df3e017ca6c903d204ff6874908ab36a5f901d3103778.exe
Resource
win7-20240220-en
General
-
Target
7eaa919c50e3132fb83df3e017ca6c903d204ff6874908ab36a5f901d3103778
-
Size
349KB
-
MD5
248149186ee11d00ed6e4166495fb1f3
-
SHA1
8c9d2e1f12e504ce54f7f4e0aa04f9213dff5f6e
-
SHA256
7eaa919c50e3132fb83df3e017ca6c903d204ff6874908ab36a5f901d3103778
-
SHA512
456e5377812dcb8926f9c4588c9a0fd91b41c2e2cb6409b257625f649e48d9b53851a5046236ac2d5ef6df3d98922a19dd550c4650335d0b7e6afd37a9119784
-
SSDEEP
6144:SaVKyyzwbnUkoiqwcAR92o29tZTEr6UTdO5CksxCDy9pPbzBHU2ytluFn7:g7yUTihRQhE9ONs46pP3BHUbtE7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7eaa919c50e3132fb83df3e017ca6c903d204ff6874908ab36a5f901d3103778
Files
-
7eaa919c50e3132fb83df3e017ca6c903d204ff6874908ab36a5f901d3103778.exe windows:5 windows x86 arch:x86
04436556038016bdc579850c86f036aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersInfo
Sections
YHGSDW Size: - Virtual size: 424KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YHGSDW Size: 340KB - Virtual size: 344KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE