Static task
static1
Behavioral task
behavioral1
Sample
24672018518c844c2432393f92333627f01b288e27e1e52d34f964b8dc213dcc.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
24672018518c844c2432393f92333627f01b288e27e1e52d34f964b8dc213dcc.exe
Resource
win10v2004-20240508-en
General
-
Target
24672018518c844c2432393f92333627f01b288e27e1e52d34f964b8dc213dcc.exe
-
Size
691KB
-
MD5
7acc89a1a089f7c689b3b51bd12ffcc0
-
SHA1
387de3c9f334fe365b0122e7676ba029d49f2e75
-
SHA256
24672018518c844c2432393f92333627f01b288e27e1e52d34f964b8dc213dcc
-
SHA512
987059023a5efd665d66822ca8d7aa8785daab214a7303280a0fc117b4a28d8be4f1c729f40ee92bb95f2c6b6d28fa2678d5a282c7c31b6162330ce37e85a25b
-
SSDEEP
12288:hCTehMl/llqHTT7yhnrnii3tFeZRS3ClGNHt6Ygle:hrhmlOmBitPlGtRgI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24672018518c844c2432393f92333627f01b288e27e1e52d34f964b8dc213dcc.exe
Files
-
24672018518c844c2432393f92333627f01b288e27e1e52d34f964b8dc213dcc.exe.exe windows:4 windows x86 arch:x86
d883ebd8acb683331ad702f643a91e67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoFreeUnusedLibraries
user32
CallNextHookEx
GetDCEx
GetActiveWindow
GetDesktopWindow
oleaut32
VarUI2FromI4
kernel32
GetProcessHeap
Sections
.text Size: 687KB - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE