Static task
static1
Behavioral task
behavioral1
Sample
7eee6c145fdacfeefa83ea11c3919eb24073c4934dc76582ce33c801575ff222.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7eee6c145fdacfeefa83ea11c3919eb24073c4934dc76582ce33c801575ff222.exe
Resource
win10v2004-20240426-en
General
-
Target
7eee6c145fdacfeefa83ea11c3919eb24073c4934dc76582ce33c801575ff222
-
Size
3.5MB
-
MD5
d490099c63e3bf590b54cdee1b1c6886
-
SHA1
447ea6e9217c844820fbd99fc9ea3839c90ae00a
-
SHA256
7eee6c145fdacfeefa83ea11c3919eb24073c4934dc76582ce33c801575ff222
-
SHA512
88adfb9acdc371784d6f3db794ca7269498b290894a49a181e36a108ca1bad684755d8ce7f6dcc5a5ede898ebf2fc7284144be23f1cd9372b2b8d005b877a532
-
SSDEEP
49152:/P6wT5zxTQYMjSopOktsvKIiQuUZ1NEzRGZ7V92ltmaESTGkA+Y81ShQxnM/RQru:X6wTrZop/M1uUkR/AaESAV8XMZr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7eee6c145fdacfeefa83ea11c3919eb24073c4934dc76582ce33c801575ff222
Files
-
7eee6c145fdacfeefa83ea11c3919eb24073c4934dc76582ce33c801575ff222.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 2.7MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ysxzvstm Size: 796KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
idagdgvh Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE