GPackage
Static task
static1
Behavioral task
behavioral1
Sample
33d3972646bf51a1a4aacae114cc7caed4603ac6840296bc58b8cc462297163c.exe
Resource
win7-20240508-en
General
-
Target
33d3972646bf51a1a4aacae114cc7caed4603ac6840296bc58b8cc462297163c
-
Size
3.2MB
-
MD5
6d703b45a35cfec7d38c3cd7e3643279
-
SHA1
7f1b59e3e7162c8f931ad7e7899aec017373daa0
-
SHA256
33d3972646bf51a1a4aacae114cc7caed4603ac6840296bc58b8cc462297163c
-
SHA512
68c2f6ed97988898628fb296b9f54970e873fc708a39ee5dc0d2cff638c4564284f9ff3a0615e47b1d9437b6665388f1c67bb6de355d0a02fe7658f3a48357c0
-
SSDEEP
49152:4NstgB8gJmpCcznVYyJ+Mi+AD6AhDSK34DkzGpu9n4btLkXKMLN7KG3VfhTzBsnp:MYsrJmpX+aAh9RiQG5LkbuG3jfBvW5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33d3972646bf51a1a4aacae114cc7caed4603ac6840296bc58b8cc462297163c
Files
-
33d3972646bf51a1a4aacae114cc7caed4603ac6840296bc58b8cc462297163c.exe windows:6 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Exports
Exports
Sections
Size: 185KB - Virtual size: 796KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 349KB - Virtual size: 827KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yxbcocls Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qqxfzfpx Size: 6KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE