Static task
static1
Behavioral task
behavioral1
Sample
9a5e9e472e27302d1268777726659f64ed9f0d9061877cd6dda1d31eb8ed6388.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9a5e9e472e27302d1268777726659f64ed9f0d9061877cd6dda1d31eb8ed6388.exe
Resource
win10v2004-20240508-en
General
-
Target
9a5e9e472e27302d1268777726659f64ed9f0d9061877cd6dda1d31eb8ed6388
-
Size
362KB
-
MD5
7e064da559216f888c487648ab6d0047
-
SHA1
54725179097947199b249b8deef4565e73151603
-
SHA256
9a5e9e472e27302d1268777726659f64ed9f0d9061877cd6dda1d31eb8ed6388
-
SHA512
89a6f380e2ee7eab04b8a087d168d320dbfca3a50253eb2f1fcc264517ca19e1a376cada60f5274151a84c695577805ba0fa8f0e6ef9e2079e11f27a45763932
-
SSDEEP
6144:1N9JuegRZ+Rpbe3xwvG854HhNOP+msxvElWGQLajLjXg+Bdx6vHGBl/+n:1Ev+RteMGzNOUdGQLoLjXnDxAiQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9a5e9e472e27302d1268777726659f64ed9f0d9061877cd6dda1d31eb8ed6388
Files
-
9a5e9e472e27302d1268777726659f64ed9f0d9061877cd6dda1d31eb8ed6388.exe windows:5 windows x86 arch:x86
42cb23b2174f50dadba92bc4a311f9ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
CreateDialogParamW
advapi32
RegCloseKey
Sections
Size: - Virtual size: 172KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE