Static task
static1
Behavioral task
behavioral1
Sample
92ab768c47b06fa3c126fa2a72392a2b8de8f8fff3a8ba13edf67b9a0b17ba74.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
92ab768c47b06fa3c126fa2a72392a2b8de8f8fff3a8ba13edf67b9a0b17ba74.exe
Resource
win10v2004-20240412-en
General
-
Target
92ab768c47b06fa3c126fa2a72392a2b8de8f8fff3a8ba13edf67b9a0b17ba74
-
Size
3.8MB
-
MD5
58b26142e4caa534cff064ed81a6e6e0
-
SHA1
6cc76d96d5bc4ede5fc280c133695e69e0e93c19
-
SHA256
92ab768c47b06fa3c126fa2a72392a2b8de8f8fff3a8ba13edf67b9a0b17ba74
-
SHA512
67d284195185b94504407ba2cee6cd9b7b792f8da551bd3f49c1531bbe843d979930631ef31216f3426445785fe70a54ab74ff48cac605eb8f2692e137c04b51
-
SSDEEP
98304:ziOeCZCUPjYLoKbbujMcjE7xCmZeGDYNe8BqBYAe/osgJo1a6:epuh7YL4jMcjsZeGDYIaoO5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 92ab768c47b06fa3c126fa2a72392a2b8de8f8fff3a8ba13edf67b9a0b17ba74
Files
-
92ab768c47b06fa3c126fa2a72392a2b8de8f8fff3a8ba13edf67b9a0b17ba74.exe windows:5 windows x86 arch:x86
e9bf96d26400e8e5643f168fe6f7b063
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
eztw32
ord4
setupapi
SetupDiGetClassDevsW
user32
GetDC
gdi32
Arc
msimg32
AlphaBlend
winspool.drv
OpenPrinterW
advapi32
RegCloseKey
shell32
DragFinish
comctl32
ord17
shlwapi
PathIsUNCW
uxtheme
IsAppThemed
ole32
DoDragDrop
oleaut32
SysStringLen
oledlg
OleUIBusyW
gdiplus
GdipFree
freeimage
_FreeImage_Copy@20
wkhtmltox
wkhtmltopdf_init
oleacc
LresultFromObject
winmm
PlaySoundW
imm32
ImmGetContext
Sections
.KITKIT1 Size: 3.7MB - Virtual size: 28.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.KITKIT2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE