Static task
static1
Behavioral task
behavioral1
Sample
b7be1882c6eae6c527c8036ec30a08659cdd301f5f786e798906631c10a5e928.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b7be1882c6eae6c527c8036ec30a08659cdd301f5f786e798906631c10a5e928.exe
Resource
win10v2004-20240508-en
General
-
Target
b7be1882c6eae6c527c8036ec30a08659cdd301f5f786e798906631c10a5e928
-
Size
3.2MB
-
MD5
7ce3ba78f23e55f8254416ca3eeddf2f
-
SHA1
bc457f7e0516628c8851ae80ee622de6fb0a25f1
-
SHA256
b7be1882c6eae6c527c8036ec30a08659cdd301f5f786e798906631c10a5e928
-
SHA512
86e4840f0726bd3f41fa3969a87f22220a8f7b7fa2c3c938cf1d49f1df9485cc9417cae0dcc407a917b177daede34416d75b6e16a2fb4208b6527512ddfa4415
-
SSDEEP
98304:lDyrhcVSPkrsy4V9CT4353HyXzIZ2lDFSfMahToooW6:lDsh3MrsrVE4J3SXzIZXfbToooW6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b7be1882c6eae6c527c8036ec30a08659cdd301f5f786e798906631c10a5e928
Files
-
b7be1882c6eae6c527c8036ec30a08659cdd301f5f786e798906631c10a5e928.exe windows:4 windows x86 arch:x86
db6955443b8ad6bda8c5eaabec8eab78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
user32
EmptyClipboard
gdi32
OffsetViewportOrgEx
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SafeArrayDestroy
comctl32
ImageList_DragLeave
ws2_32
closesocket
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.0MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1016KB - Virtual size: 1016KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.idata
-
.rsrc/0/GROUP_ICON/DEFAULT_ICON
-
.rsrc/0/ICON/10.ico
-
.rsrc/0/ICON/3.ico
-
.rsrc/0/ICON/4.ico
-
.rsrc/0/ICON/5.ico
-
.rsrc/0/ICON/6.ico
-
.rsrc/0/ICON/7.ico
-
.rsrc/0/ICON/8.ico
-
.rsrc/0/ICON/9.ico
-
.rsrc/0/MANIFEST/1.xml
-
.rsrc/2052/GROUP_ICON/1151
-
.rsrc/2052/GROUP_ICON/1152
-
.rsrc/2052/ICON/1.ico
-
.rsrc/2052/ICON/2.ico
-
.rsrc/2052/version.txt
-
.sedata
-
.text