Static task
static1
Behavioral task
behavioral1
Sample
87845540197b0eb60358f9a26251649e2333064d4b3bb5f2e61590a9872b4eb1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
87845540197b0eb60358f9a26251649e2333064d4b3bb5f2e61590a9872b4eb1.exe
Resource
win10v2004-20240508-en
General
-
Target
87845540197b0eb60358f9a26251649e2333064d4b3bb5f2e61590a9872b4eb1
-
Size
12.0MB
-
MD5
d386a1f4c4e49686b26df04a90a9e49f
-
SHA1
a42c695c2e8645739e68cb645f48dd00bc6f80a6
-
SHA256
87845540197b0eb60358f9a26251649e2333064d4b3bb5f2e61590a9872b4eb1
-
SHA512
aa972ac6aa5b4cef5b45b4c59c1b3b55464b805514cd55dfcacf1a0d6c1372aa08558f3c21df4e99ee843628bc28e74bc3d50863b715108a548b7c7b886899b6
-
SSDEEP
196608:L4HKDQBKkXy+XEt815j5tDobSUFQDubz77dkJ9sT:LaK0BK+Rvj5t0ZFQ6bzXyPw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87845540197b0eb60358f9a26251649e2333064d4b3bb5f2e61590a9872b4eb1
Files
-
87845540197b0eb60358f9a26251649e2333064d4b3bb5f2e61590a9872b4eb1.exe windows:5 windows x86 arch:x86
fc1d68c1c023dcfab1ae3788cb82472f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueW
mpr
WNetGetConnectionA
ole32
CreateStreamOnHGlobal
comctl32
_TrackMouseEvent
shell32
ShellExecuteA
comdlg32
GetOpenFileNameA
wsock32
WSACleanup
gdiplus
GdipSetStringFormatLineAlign
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
shlwapi
PathFindExtensionA
ws2_32
htons
wininet
InternetSetCookieA
winhttp
WinHttpSetCredentials
oledlg
ord8
icmp
IcmpCreateFile
winspool.drv
OpenPrinterA
Sections
.text Size: 9.7MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hero Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hero Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ