Static task
static1
Behavioral task
behavioral1
Sample
f963e2374a49355515086011726c1f3df4dd88060bdadb0e2d37e1daae8215ac.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
f963e2374a49355515086011726c1f3df4dd88060bdadb0e2d37e1daae8215ac.exe
Resource
win10v2004-20240426-en
General
-
Target
f963e2374a49355515086011726c1f3df4dd88060bdadb0e2d37e1daae8215ac
-
Size
399KB
-
MD5
4966d675ef2895c479a6dda0a544a781
-
SHA1
87ade9cc258e7cb2edce7555bd1e8b649de94a9d
-
SHA256
f963e2374a49355515086011726c1f3df4dd88060bdadb0e2d37e1daae8215ac
-
SHA512
8c23dc3abe9e153e312f0ebef8cbb9ab1c61eb0b806b9442decd5655c7ba1428d5933a5158fe96158363a7de2e151ca0ffc2d4f4ff3307d3b2dc3d9caaa0fdf5
-
SSDEEP
12288:7mIlX4PsyobFXJMSRpGe2IelMslQqn7GTFD:7V401XJX7G5ItslVM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource f963e2374a49355515086011726c1f3df4dd88060bdadb0e2d37e1daae8215ac
Files
-
f963e2374a49355515086011726c1f3df4dd88060bdadb0e2d37e1daae8215ac.exe windows:6 windows x86 arch:x86
4de596e02dfd8f7034d5d76abb88cf98
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
wsprintfW
advapi32
RegCloseKey
comctl32
PropertySheet
Sections
Size: - Virtual size: 212KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 472B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE