Static task
static1
Behavioral task
behavioral1
Sample
473a3a3aa232ed4e57cc0b6ee14eeead01955bd7516fa2996bcbed22779e1da7.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
473a3a3aa232ed4e57cc0b6ee14eeead01955bd7516fa2996bcbed22779e1da7.exe
Resource
win10v2004-20240611-en
General
-
Target
473a3a3aa232ed4e57cc0b6ee14eeead01955bd7516fa2996bcbed22779e1da7
-
Size
263KB
-
MD5
e49b6410f11867333bd5b87ea5de24e0
-
SHA1
7ab28ed9f6713514740f94e109aa2a5ca4d0eaea
-
SHA256
473a3a3aa232ed4e57cc0b6ee14eeead01955bd7516fa2996bcbed22779e1da7
-
SHA512
539264b3dc4cc08cf30c324d9a9a80f582255c1634ca19976d15388d961f0a966165abe1197bd432631a86933cc0e8e8a983e81089b71b3f871e196b1eea0ed4
-
SSDEEP
6144:gFRFqYccqWTCNn98ayOqSn6+62N5BtrB1Ux+ajMWyITMgggB:gR0Ycnia98ayOqS6R85BFBIJIWxB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 473a3a3aa232ed4e57cc0b6ee14eeead01955bd7516fa2996bcbed22779e1da7
Files
-
473a3a3aa232ed4e57cc0b6ee14eeead01955bd7516fa2996bcbed22779e1da7.exe windows:4 windows x86 arch:x86
1cbb0956bb3493568e6ff32408eeac2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
dhplay
ord37
user32
GetClassInfoExW
gdi32
CreateSolidBrush
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegQueryValueW
shell32
SHGetPathFromIDListW
comctl32
ImageList_GetIconSize
shlwapi
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoRegisterMessageFilter
oleaut32
SysAllocString
Sections
.text Size: 234KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE