Static task
static1
Behavioral task
behavioral1
Sample
82143303ab89d92c5f04c2b343042a4ed5ec0fcc99deb6fa97b20d4c4e43de0f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
82143303ab89d92c5f04c2b343042a4ed5ec0fcc99deb6fa97b20d4c4e43de0f.exe
Resource
win10v2004-20240226-en
General
-
Target
82143303ab89d92c5f04c2b343042a4ed5ec0fcc99deb6fa97b20d4c4e43de0f.exe
-
Size
5.9MB
-
MD5
4a12627abc0bc81999b528b264dd6b27
-
SHA1
1076e57d550e49c76ca735cba91eb3a9e933620f
-
SHA256
82143303ab89d92c5f04c2b343042a4ed5ec0fcc99deb6fa97b20d4c4e43de0f
-
SHA512
f9ab3dfb048930b4913464f37c4d5acf43b2ac476f2f3fd7932f013efa03714c81e08b62a993d78a828998789243d903187454245b672446be4f35d10b6f806a
-
SSDEEP
98304:2fkYaWUMbISH/to2jxTukGtk2n0gfMu240jJR6/VAysCe1HmhqSt/meH0HmS1usT:2lbFH/62jxl20WMuZon6/V0Ce1GhVX09
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82143303ab89d92c5f04c2b343042a4ed5ec0fcc99deb6fa97b20d4c4e43de0f.exe
Files
-
82143303ab89d92c5f04c2b343042a4ed5ec0fcc99deb6fa97b20d4c4e43de0f.exe.exe windows:5 windows x86 arch:x86
ab62b0364b0506ebbd75a7ebc39373e5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_EH_prolog
kernel32
IsProcessorFeaturePresent
LocalAlloc
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
CharToOemA
GetProcessWindowStation
advapi32
RegOpenKeyExA
ole32
CoInitializeSecurity
oleaut32
VariantClear
shlwapi
ord155
Sections
.text Size: - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7ZIP0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.7ZIP1 Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp¤» Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp¤» Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp¤» Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ