Static task
static1
Behavioral task
behavioral1
Sample
b57a33baa7c5107ea978622d5f42e79ff4a7502dd5f588e3a4e53c549aa8f5b7.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b57a33baa7c5107ea978622d5f42e79ff4a7502dd5f588e3a4e53c549aa8f5b7.exe
Resource
win10v2004-20240426-en
General
-
Target
b57a33baa7c5107ea978622d5f42e79ff4a7502dd5f588e3a4e53c549aa8f5b7
-
Size
4.7MB
-
MD5
b0ccadf9bad3ef5adb1caca7d4a9db12
-
SHA1
13754221c544ad297436df07f8b02581210530af
-
SHA256
b57a33baa7c5107ea978622d5f42e79ff4a7502dd5f588e3a4e53c549aa8f5b7
-
SHA512
007b93fd9c72f4ef419414bcb48c8182bc5f442b936685c12e09fe13ac6c44a3ac32bd61882944e5f444b3b0c5ca11d6ed4754b1dda1985212c763bd40345116
-
SSDEEP
98304:nmAXOrSLwLnHbsy15eQ4D8pETcitgE0jWXIIFOq0THKoWnPNXVvtf6:vUSLIA3/92EI+OyoWnPdVF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b57a33baa7c5107ea978622d5f42e79ff4a7502dd5f588e3a4e53c549aa8f5b7
Files
-
b57a33baa7c5107ea978622d5f42e79ff4a7502dd5f588e3a4e53c549aa8f5b7.exe windows:4 windows
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 416KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 984KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zkimxjfh Size: 884KB - Virtual size: 884KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
njucercn Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE