Static task
static1
Behavioral task
behavioral1
Sample
4894a3db3e63826963764724f3d4b6934e44c600647f3c76ea009ebfb8511967.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4894a3db3e63826963764724f3d4b6934e44c600647f3c76ea009ebfb8511967.exe
Resource
win10v2004-20240508-en
General
-
Target
4894a3db3e63826963764724f3d4b6934e44c600647f3c76ea009ebfb8511967
-
Size
348KB
-
MD5
f9e62ed3c4d3fb3207db993b1add73f4
-
SHA1
d9badb4b7b422aa9f70122007072fbc002e6c35b
-
SHA256
4894a3db3e63826963764724f3d4b6934e44c600647f3c76ea009ebfb8511967
-
SHA512
56b556791f599cb9971479cc32f4959e0bce29c974199ef1738e8668826ddcf23b34eff453c08d0f3ed6e7f3317be62c61375e827a27c3b76a8da791a50ad683
-
SSDEEP
6144:jUonUcvCrC3NZz3lWMLCmWoWu1iyuRLv1oKCH51QwZphvhYiiLUEtkA4uz:jUonUcvMC3b5WMLCmjl/8LvahnZj/iXR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4894a3db3e63826963764724f3d4b6934e44c600647f3c76ea009ebfb8511967
Files
-
4894a3db3e63826963764724f3d4b6934e44c600647f3c76ea009ebfb8511967.exe windows:5 windows x86 arch:x86
82b3a36decf28ebda90573542c4dc5af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
LoadMenuW
advapi32
RegCloseKey
Sections
Size: - Virtual size: 160KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE