Static task
static1
Behavioral task
behavioral1
Sample
85583077ee81cc6a80ec01acdc0e8975cdc39801f8d52e0befa899afda195b54.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
85583077ee81cc6a80ec01acdc0e8975cdc39801f8d52e0befa899afda195b54.exe
Resource
win10v2004-20240426-en
General
-
Target
85583077ee81cc6a80ec01acdc0e8975cdc39801f8d52e0befa899afda195b54
-
Size
9.6MB
-
MD5
5fc5812e5b9b1aa5af1fc4b1c2163f61
-
SHA1
3e638cab91da7cdc73b7ca3a0c1d89e5e4b89e44
-
SHA256
85583077ee81cc6a80ec01acdc0e8975cdc39801f8d52e0befa899afda195b54
-
SHA512
24bbdd7edb9b63d06d100509516267bd7e4d83d3c2aaa4f1a21a35341b24765cc56aa1ae8a870884c7524a16410b4578c0c5efb90255e36510826d95b60123db
-
SSDEEP
196608:yJv8S95pmUAP4SpJCLPnbbdS5No/WGwzxdpWVhB+oEvRItCgkT0Ewua+jVd:yvN9jmUiJoPnng+/iehjEvRIYHdpd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85583077ee81cc6a80ec01acdc0e8975cdc39801f8d52e0befa899afda195b54
Files
-
85583077ee81cc6a80ec01acdc0e8975cdc39801f8d52e0befa899afda195b54.exe windows:5 windows x86 arch:x86
d01be88039187fb974b657cbfb9022eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
ResumeThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
SetTimer
gdi32
BitBlt
advapi32
RegEnumKeyExA
shell32
SHBrowseForFolderA
ole32
OleLockRunning
oleaut32
VariantClear
shlwapi
PathIsDirectoryA
comctl32
_TrackMouseEvent
wininet
InternetOpenA
ws2_32
WSASend
psapi
GetProcessImageFileNameA
crypt32
CertEnumCertificatesInStore
Sections
.text Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 583KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.beta0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.beta1 Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ