Static task
static1
Behavioral task
behavioral1
Sample
de4e9a1ba10bf41d6ac7c171ead973cfec2dfc77c68cde8a2d74ff503d7e6354.exe
Resource
win7-20240221-en
General
-
Target
de4e9a1ba10bf41d6ac7c171ead973cfec2dfc77c68cde8a2d74ff503d7e6354
-
Size
482KB
-
MD5
c91c8fa301d6fea47594c1cba1805fcb
-
SHA1
c654a5061a5cdf5e9e0d3cb36a32c8b6e5de01c9
-
SHA256
de4e9a1ba10bf41d6ac7c171ead973cfec2dfc77c68cde8a2d74ff503d7e6354
-
SHA512
aee656d0c310ba78c897511febf0b31c7a989da6987cb54ef9da334c06eb81f34bcc45570bd44114fc47595ac19689a5376c7eb46b694ac2fbdf83c116d46e5e
-
SSDEEP
12288:9PTveekpmU2GxQA5dZWkZK6nPqM+WcD4ellNrr/G:9I24QAhWhWMHD4MlNHG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de4e9a1ba10bf41d6ac7c171ead973cfec2dfc77c68cde8a2d74ff503d7e6354
Files
-
de4e9a1ba10bf41d6ac7c171ead973cfec2dfc77c68cde8a2d74ff503d7e6354.exe windows:5 windows x86 arch:x86
5ee0d146292a4d3cd3e543dd755df065
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
SetWindowTextW
advapi32
RegQueryValueExW
shell32
ShellExecuteA
ws2_32
gethostbyaddr
iphlpapi
GetAdaptersInfo
wtsapi32
WTSRegisterSessionNotification
oleacc
LresultFromObject
gdi32
DeleteDC
winspool.drv
OpenPrinterW
oleaut32
VariantClear
Sections
.text Size: 448KB - Virtual size: 524KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 24B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE