Static task
static1
Behavioral task
behavioral1
Sample
b63baddcd77cd48ed4ae02d4804be07cc64e38186d1de54a134118fc67c404f1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b63baddcd77cd48ed4ae02d4804be07cc64e38186d1de54a134118fc67c404f1.exe
Resource
win10v2004-20240508-en
General
-
Target
b63baddcd77cd48ed4ae02d4804be07cc64e38186d1de54a134118fc67c404f1
-
Size
11.7MB
-
MD5
77d83a0f023e7d9fcb7127fb15b029ac
-
SHA1
aadc744bc5ec1be86c359bb85118311119179848
-
SHA256
b63baddcd77cd48ed4ae02d4804be07cc64e38186d1de54a134118fc67c404f1
-
SHA512
12f8e6d880050da69bcbe7cec262e54003e7ff0d43642a6132dfa3ae46078f876127980fb3a3ec845ccbda0b556a24051ea4a820c3186e686ffc6902db6eef80
-
SSDEEP
196608:CVwFhnEzuWmMq2Y9MvqCXqX4NANONSnDPeL7TXM2g5NwnT2GIKjL:ThIOMq2YCvqoM4iNnnDP8Ti/wneKjL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b63baddcd77cd48ed4ae02d4804be07cc64e38186d1de54a134118fc67c404f1
Files
-
b63baddcd77cd48ed4ae02d4804be07cc64e38186d1de54a134118fc67c404f1.exe windows:5 windows x86 arch:x86
706505942031ed5b950195e3588bc0a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
UnregisterClassA
gdi32
ExtSelectClipRgn
winmm
waveOutRestart
winspool.drv
OpenPrinterA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
OleUninitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
inet_addr
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 645KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7;q Size: - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.[-U Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.7Ev Size: 11.6MB - Virtual size: 11.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ