Static task
static1
Behavioral task
behavioral1
Sample
f59c2930b2c8253bd23ab1cfe196a6778abe428e26c6522fe2b62a9eec340375.exe
Resource
win7-20240220-en
General
-
Target
f59c2930b2c8253bd23ab1cfe196a6778abe428e26c6522fe2b62a9eec340375
-
Size
11.0MB
-
MD5
90be2d16a011c864a53b52f179332488
-
SHA1
4eb7e87fc884f03b75dc070ec496ddc691ca4ab1
-
SHA256
f59c2930b2c8253bd23ab1cfe196a6778abe428e26c6522fe2b62a9eec340375
-
SHA512
8ca58ff55e4ad27a505d19105b7d66c4f224e2e805dbe90f09b1d507bf7d627d74ee2acc175d9ab10776b102b4d94194460f5696b36c2bda8ce4ff649ec294e3
-
SSDEEP
196608:LYXQ3CUQLVBTWHvCs8FzV73UTZElSXhJqmeGReKI4zI8p1N30SE15FPt:zCFLAvCs0ByXhJq2goIPvt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f59c2930b2c8253bd23ab1cfe196a6778abe428e26c6522fe2b62a9eec340375
Files
-
f59c2930b2c8253bd23ab1cfe196a6778abe428e26c6522fe2b62a9eec340375.exe windows:6 windows x86 arch:x86
1bfeeee7596a188d61359bc2a62ca73d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
InflateRect
CharUpperBuffW
gdi32
GetPixel
msimg32
AlphaBlend
winspool.drv
ClosePrinter
advapi32
SystemFunction036
shell32
CommandLineToArgvW
comctl32
InitCommonControlsEx
shlwapi
UrlUnescapeW
uxtheme
DrawThemeParentBackground
ole32
IsAccelerator
oleaut32
SysAllocStringLen
oledlg
OleUIBusyW
gdiplus
GdipDrawImageRectI
version
GetFileVersionInfoSizeW
ws2_32
WSAStartup
wininet
HttpQueryInfoW
iphlpapi
GetAdaptersInfo
oleacc
AccessibleObjectFromWindow
imm32
ImmGetContext
winmm
PlaySoundW
Sections
.text Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.B300 Size: - Virtual size: 7.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.B301 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.B302 Size: 10.8MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ