Static task
static1
Behavioral task
behavioral1
Sample
d8cbbb545c3b804cd8ac1f861b18852761a987693650478fb01ae98538df9741.exe
Resource
win7-20240221-en
General
-
Target
d8cbbb545c3b804cd8ac1f861b18852761a987693650478fb01ae98538df9741.exe
-
Size
2.4MB
-
MD5
913ffffe973462ca717e6d6a35435f05
-
SHA1
f60417a8f4ce340251f855a3c7d1932debddf6e2
-
SHA256
d8cbbb545c3b804cd8ac1f861b18852761a987693650478fb01ae98538df9741
-
SHA512
c044047ff860ee688a6fc5c9e160fccfbf9924e1d00d43c365f2603eaa5ad2d8159e73f20e752b52f569d7716e554d04b8f55cd9ad1775ae0bb62e15a421e1be
-
SSDEEP
49152:Et9lTickDxB5/C22m7GoKwZj3Xtn/gumuRIueEI:kl+cM5/2m7GoKczphZRK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8cbbb545c3b804cd8ac1f861b18852761a987693650478fb01ae98538df9741.exe
Files
-
d8cbbb545c3b804cd8ac1f861b18852761a987693650478fb01ae98538df9741.exe.exe windows:5 windows x86 arch:x86
c400e59b564e8c451299e3dea65fffb9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_EH_prolog
kernel32
IsProcessorFeaturePresent
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
wsprintfW
advapi32
RegGetValueA
shell32
SHFileOperationA
ole32
CoSetProxyBlanket
oleaut32
VariantInit
shlwapi
ord155
crypt32
CryptStringToBinaryA
Sections
.text Size: - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpn�� Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmpn�� Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmpn�� Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ