Static task
static1
Behavioral task
behavioral1
Sample
ed5b7c8275180bf26b9bf422e1f6aa29032f331516481716619a7d89eddf7200.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ed5b7c8275180bf26b9bf422e1f6aa29032f331516481716619a7d89eddf7200.exe
Resource
win10v2004-20240508-en
General
-
Target
ed5b7c8275180bf26b9bf422e1f6aa29032f331516481716619a7d89eddf7200
-
Size
6.2MB
-
MD5
d0cef400067dc50cda666a5b6525699f
-
SHA1
123bbccb71c6e622d78db11bfabc150589ef6b76
-
SHA256
ed5b7c8275180bf26b9bf422e1f6aa29032f331516481716619a7d89eddf7200
-
SHA512
5cde80d839b6502ea6435dbde583d8e8a312e91775f5a622818cff1019deb95d0d4d2dc12f8668eae63b0f131d29343c8f938624f5ef2faa9527661a9696fd72
-
SSDEEP
98304:JvDr+Tjrpq9dqIFH2GOVLTuvRWJBrfH0n9IIOVILwtHrNAPChjgs4ksG+sV8xqTV:lOXpekIhROVuvRWv7OSIHsXavZ2V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed5b7c8275180bf26b9bf422e1f6aa29032f331516481716619a7d89eddf7200
Files
-
ed5b7c8275180bf26b9bf422e1f6aa29032f331516481716619a7d89eddf7200.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 5.0MB - Virtual size: 22.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jnuoevsl Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xgawvfjb Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE