Static task
static1
Behavioral task
behavioral1
Sample
94f72fd4417343042fcacd56bd4491f0d638d37388c8d79839c3742c2ebbcaef.exe
Resource
win7-20240221-en
General
-
Target
94f72fd4417343042fcacd56bd4491f0d638d37388c8d79839c3742c2ebbcaef
-
Size
2.4MB
-
MD5
82f1a97f6d08a0d16ad9e44d05f724ba
-
SHA1
4ac47621e58f6dfc22500de1c85feccca94cbefe
-
SHA256
94f72fd4417343042fcacd56bd4491f0d638d37388c8d79839c3742c2ebbcaef
-
SHA512
76ec2d51301f3f15a74ce572d10f4e99727d40b6a841195e798987fa17b3ae5604d9fd6fc824f2eef209cc60827ed400deb35c85ca0e408d0c8a4350f31dbdd2
-
SSDEEP
49152:uxFPv/gxRpiyLV1i/DeGjYiw7OWsAKSyue66vrHJk:uV38p9+DeGcFOLzub6vry
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94f72fd4417343042fcacd56bd4491f0d638d37388c8d79839c3742c2ebbcaef
Files
-
94f72fd4417343042fcacd56bd4491f0d638d37388c8d79839c3742c2ebbcaef.exe windows:5 windows x86 arch:x86
c400e59b564e8c451299e3dea65fffb9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_EH_prolog
kernel32
IsProcessorFeaturePresent
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
wsprintfW
advapi32
RegGetValueA
shell32
SHFileOperationA
ole32
CoSetProxyBlanket
oleaut32
VariantInit
shlwapi
ord155
crypt32
CryptStringToBinaryA
Sections
.text Size: - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpn�� Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmpn�� Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpn�� Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ