Static task
static1
Behavioral task
behavioral1
Sample
c920467d8d186a091d238ccc77baff9bd0a58c5df50ba832395700b772a2a017.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
c920467d8d186a091d238ccc77baff9bd0a58c5df50ba832395700b772a2a017.exe
Resource
win10v2004-20240508-en
General
-
Target
c920467d8d186a091d238ccc77baff9bd0a58c5df50ba832395700b772a2a017
-
Size
6.3MB
-
MD5
caaf89074cad2b6c9353393c53ec2445
-
SHA1
dc551ce7f375e24fbd6bdb3ab97b3bac9ddb7f29
-
SHA256
c920467d8d186a091d238ccc77baff9bd0a58c5df50ba832395700b772a2a017
-
SHA512
59685e80e7cfc5f52a2dbf7172bf27bb6ddf8549cc97d4bc14b70c2e49fcb6f62b0e2b4b1fc3d5e899718ec75920a3227e8b332585fb2f6387334200274de8fb
-
SSDEEP
196608:Oe2OcJdupmFQ0wu6lLd2IvC4pC04ezNsgNvGVft:OercXupBu6Zk4A04ezNsgVI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c920467d8d186a091d238ccc77baff9bd0a58c5df50ba832395700b772a2a017
Files
-
c920467d8d186a091d238ccc77baff9bd0a58c5df50ba832395700b772a2a017.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 5.2MB - Virtual size: 23.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
jzsnvxhu Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qijqwcet Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE