Static task
static1
Behavioral task
behavioral1
Sample
441a1af1231a8ccf277606649a7aac96265e0116bbc524e4fad898c720a68530.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
441a1af1231a8ccf277606649a7aac96265e0116bbc524e4fad898c720a68530.exe
Resource
win10v2004-20240508-en
General
-
Target
441a1af1231a8ccf277606649a7aac96265e0116bbc524e4fad898c720a68530
-
Size
63KB
-
MD5
b2fb89790e7b2fc14c63bab667bbd922
-
SHA1
071accd9585dc58e8eabf65ce0fa77633b0cda71
-
SHA256
441a1af1231a8ccf277606649a7aac96265e0116bbc524e4fad898c720a68530
-
SHA512
5ff8fc8591a2b45571683603d6bfce9f8738bfc7f93b7879db1c2a52a5e7e844e5fb27e14a95730782bca5b716e41021c3d2495fa53cc3dc283234f31989ca72
-
SSDEEP
192:E4NyJHoFRs7crkr/ymnG8C5YK06tnxPqdSvz+KYpC37:EugHOmXr/bb4xxHL+KYpC37
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 441a1af1231a8ccf277606649a7aac96265e0116bbc524e4fad898c720a68530
Files
-
441a1af1231a8ccf277606649a7aac96265e0116bbc524e4fad898c720a68530.exe windows:5 windows x86 arch:x86
1191a8761c4a6dc9d2875577dc8272cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
CryptHashData
ntdll
_wtoi
ole32
CreateStreamOnHGlobal
user32
wsprintfA
winhttp
WinHttpOpen
Sections
. Size: 5KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE