Static task
static1
Behavioral task
behavioral1
Sample
a74b9f087bc33cd92956ee332f752230d838f3f80b66ac7d1dcddc7bbcacb520.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a74b9f087bc33cd92956ee332f752230d838f3f80b66ac7d1dcddc7bbcacb520.exe
Resource
win10v2004-20240508-en
General
-
Target
a74b9f087bc33cd92956ee332f752230d838f3f80b66ac7d1dcddc7bbcacb520
-
Size
7.7MB
-
MD5
072a8596f8f145e114346b0478d501e0
-
SHA1
35a09264dad2b2dedcadbad4e4cfd9dc23b59af1
-
SHA256
a74b9f087bc33cd92956ee332f752230d838f3f80b66ac7d1dcddc7bbcacb520
-
SHA512
db8f3212b6a34c3dfc417cdc33f580175db8ca90dd3d3d80bdd63b8b51329b4311963b57d48a86bc946ef517ab8c2fb863e12f79c747c2a94fc3a3c04f3c7f87
-
SSDEEP
196608:u8SyaBMCxxBfSabmYCPz3Up4fdQJdzkUPTgpWeue:u8SnJBfz03U46JBkPp8e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a74b9f087bc33cd92956ee332f752230d838f3f80b66ac7d1dcddc7bbcacb520
Files
-
a74b9f087bc33cd92956ee332f752230d838f3f80b66ac7d1dcddc7bbcacb520.exe windows:5 windows x86 arch:x86
471c8274e38b44df1a1cc78da5b6087f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
lz32
LZCopy
shlwapi
SHCreateStreamOnFileW
version
GetFileVersionInfoSizeW
user32
CopyImage
olepro32
OleLoadPicture
oledlg
OleUIPasteSpecialW
oleaut32
SafeArrayPutElement
netapi32
NetWkstaGetInfo
advapi32
RegSetValueExW
msvcrt
wcstombs
winhttp
WinHttpGetIEProxyConfigForCurrentUser
shfolder
SHGetFolderPathW
wsock32
WSAGetLastError
gdiplus
GdipFillEllipseI
gdi32
EnumEnhMetaFile
usp10
ScriptFreeCache
mpr
WNetEnumResourceW
winmm
sndPlaySoundW
oleacc
LresultFromObject
wininet
InternetCloseHandle
winspool.drv
DocumentPropertiesW
comdlg32
FindTextW
comctl32
ImageList_GetImageInfo
shell32
SHBrowseForFolderW
urlmon
CreateURLMoniker
ole32
OleCreateLinkToFile
iphlpapi
GetAdaptersInfo
Sections
.text Size: 7.6MB - Virtual size: 33.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE