Static task
static1
Behavioral task
behavioral1
Sample
9894a983dae4a21245a82a5bbfc6885986c8e37a7717116252a0fcf2486e0897.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
9894a983dae4a21245a82a5bbfc6885986c8e37a7717116252a0fcf2486e0897.exe
Resource
win10v2004-20240426-en
General
-
Target
9894a983dae4a21245a82a5bbfc6885986c8e37a7717116252a0fcf2486e0897
-
Size
576KB
-
MD5
61c1dd22f9a5535d1759c936b75f95eb
-
SHA1
dece1665305d2d28d6be7332057ae818a90df364
-
SHA256
9894a983dae4a21245a82a5bbfc6885986c8e37a7717116252a0fcf2486e0897
-
SHA512
44c6d137bee77bfb443d561831de89563869db3e20a834ed530a89391688cc007639159f9513c129a11cb3168bcc476b46a86e8b732edb8b7502fd621904632d
-
SSDEEP
12288:BF0ubi+X+yAx7qjXFGcymPyDx1xbW0uwSfDqZ2cPNOiL6gLFumHT4edW/L:B7V+yAx7qJGdVvXBwK6Gumz4r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9894a983dae4a21245a82a5bbfc6885986c8e37a7717116252a0fcf2486e0897
Files
-
9894a983dae4a21245a82a5bbfc6885986c8e37a7717116252a0fcf2486e0897.exe windows:6 windows x86 arch:x86
fce1eeeefbe9787dbfcbe7b0a43fce2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
GetSystemMetrics
advapi32
CryptEncrypt
comctl32
PropertySheet
Sections
Size: - Virtual size: 380KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 480B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE