Static task
static1
Behavioral task
behavioral1
Sample
24435bf8d35286096746367d0ff09848c24c09a70c3c656068323d4bcb32e8c9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
24435bf8d35286096746367d0ff09848c24c09a70c3c656068323d4bcb32e8c9.exe
Resource
win10v2004-20240226-en
General
-
Target
24435bf8d35286096746367d0ff09848c24c09a70c3c656068323d4bcb32e8c9
-
Size
60KB
-
MD5
51670a4eea51221b6559352be3a0c61c
-
SHA1
bd1f4b0fce82878be1ed14ed812397dacafa0ea0
-
SHA256
24435bf8d35286096746367d0ff09848c24c09a70c3c656068323d4bcb32e8c9
-
SHA512
5834fd929a9ccc54676ae30ef7974324f439329ad94ba2a70baee95f2572dc7db3d110ef294d27f08eda6a1f3240a0cb760539cbaa58d552d8cb566a04b1d436
-
SSDEEP
768:TiVSJvcOj9gRtQWCPLQP3YZX2TwN4XtTp0wwSo9maJ+JY48Aqy:WVS5c8WCPLQ/tdTpfwSks7q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24435bf8d35286096746367d0ff09848c24c09a70c3c656068323d4bcb32e8c9
Files
-
24435bf8d35286096746367d0ff09848c24c09a70c3c656068323d4bcb32e8c9.exe windows:4 windows x86 arch:x86
5c8fa1ce29408600188531927b43c0fb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc70
ord1814
ord1508
ord1507
ord4972
ord2356
ord2546
ord2648
ord4088
ord2529
ord2675
ord2359
ord2463
ord2352
ord2799
ord3522
ord3523
ord3513
ord2461
ord3751
ord4267
ord4042
ord518
ord701
ord1081
ord1077
ord705
ord703
ord1755
ord5176
ord982
ord408
ord407
ord1646
ord3062
ord4958
ord3993
ord4516
ord4671
ord1870
ord1523
ord1522
ord1403
ord5666
ord1272
ord4975
ord1451
ord4043
ord2990
ord546
ord300
ord5815
ord2474
ord5591
ord5950
ord4361
ord3400
ord2926
ord5700
ord3712
ord4322
ord3487
ord3832
ord4954
ord5992
ord3609
ord5990
ord4107
ord1913
ord1868
ord5339
ord3614
ord899
ord4883
ord5933
ord5152
ord3640
ord1770
ord2741
ord4996
ord4998
ord2096
ord3750
ord4349
ord5002
ord4985
ord5322
ord2651
ord4262
ord3140
ord512
ord698
ord947
ord977
ord2200
ord956
ord1180
ord2024
ord957
ord1744
ord4530
ord650
ord447
ord571
ord2896
ord1871
ord331
ord1014
ord890
ord5198
ord390
ord618
ord5699
ord2923
ord3711
ord5007
ord5005
ord2219
ord2229
ord2227
ord2225
ord2221
ord2244
ord2232
ord1466
ord1234
ord4748
ord3152
ord5991
ord3610
ord5993
ord1377
ord2020
ord2026
ord2234
ord2216
ord2214
ord2237
ord2242
ord2223
ord2239
ord823
ord819
ord821
ord817
ord812
ord5714
ord1452
ord4063
ord4503
ord3208
ord4986
ord3966
ord5989
ord4854
ord1760
ord4933
ord4025
ord1273
ord3748
ord1469
ord1472
ord5669
ord710
ord3445
ord3814
ord3409
ord1097
msvcr70
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
_access
vsprintf
_vscprintf
sprintf
toupper
__CxxFrameHandler
memmove
_setmbcp
_ltoa
_mbscmp
_mbschr
_mbsrchr
_mbslwr
_except_handler3
kernel32
GetDriveTypeA
FileTimeToSystemTime
WideCharToMultiByte
SizeofResource
InterlockedExchange
LoadResource
FindResourceA
FindClose
FindFirstFileA
FindNextFileA
GetModuleHandleA
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetLocaleInfoA
LockResource
GetVersionExA
GetThreadLocale
user32
GetSystemMetrics
LoadIconA
DrawIcon
GetClientRect
IsIconic
GetSystemMenu
AppendMenuA
EnableWindow
SendMessageA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyA
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ