Static task
static1
Behavioral task
behavioral1
Sample
87ef93cdb6836ba8d95ac80ab86e04c19351096b62d954d2d7b53139da87c459.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
87ef93cdb6836ba8d95ac80ab86e04c19351096b62d954d2d7b53139da87c459.exe
Resource
win10v2004-20240704-en
General
-
Target
87ef93cdb6836ba8d95ac80ab86e04c19351096b62d954d2d7b53139da87c459
-
Size
998KB
-
MD5
bb85082bc33504cbd82eabb6fccbc98f
-
SHA1
c5ebce5713b9e654618815b6ea8a863276d075e0
-
SHA256
87ef93cdb6836ba8d95ac80ab86e04c19351096b62d954d2d7b53139da87c459
-
SHA512
60cb30b15c8f8da7294e0d21d87ef6eb62f52146166b347ca6ac0c4a047453511d38d1c0c0f90a57244be74cbd58b8b1ee405a5dc973e9e2f10847dc64e22f86
-
SSDEEP
12288:1mRFIc91uoNlipzb47JIWeIg3efiSIT7yh+VFiQmQhFjMpJIcjlB8gXVUwGYb2NX:gnYJUCxSIfREQbGjQ8mwGfEt64YGSDsQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87ef93cdb6836ba8d95ac80ab86e04c19351096b62d954d2d7b53139da87c459
Files
-
87ef93cdb6836ba8d95ac80ab86e04c19351096b62d954d2d7b53139da87c459.exe windows:4 windows x86 arch:x86
f7d7aebc53da63d60a50b5993b57877a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
CharNextA
advapi32
RegCloseKey
oleaut32
SysFreeString
wsock32
send
Sections
.MPRESS1 Size: 37KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE