Static task
static1
Behavioral task
behavioral1
Sample
2909cd638713aab09649d7269cf372d7992fb86b24438fa00e9fcc59524d0d63.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2909cd638713aab09649d7269cf372d7992fb86b24438fa00e9fcc59524d0d63.exe
Resource
win10v2004-20240508-en
General
-
Target
2909cd638713aab09649d7269cf372d7992fb86b24438fa00e9fcc59524d0d63.exe
-
Size
56KB
-
MD5
97291d3982648bb4272ba3fcb6498230
-
SHA1
56e87439f440b9061867835787762e8e22d817fd
-
SHA256
2909cd638713aab09649d7269cf372d7992fb86b24438fa00e9fcc59524d0d63
-
SHA512
fc61b32ec542d7f4d3518efff7511c94869f95aad36be49c9240e3435716c5d086f4f5f53a02123d69d0f60d035079cdde6625e6815bebfc635b2a1d61615033
-
SSDEEP
768:zTAiYUVaQDKVRRZgqq6UFFAKcls0ceVA1JYNkqeR:HAqamKVO6s0hVA1Jn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2909cd638713aab09649d7269cf372d7992fb86b24438fa00e9fcc59524d0d63.exe
Files
-
2909cd638713aab09649d7269cf372d7992fb86b24438fa00e9fcc59524d0d63.exe.exe windows:5 windows x86 arch:x86
b54757880e34d193f6c36b5f50a2be11
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cabinet
ord13
mscms
CreateColorTransformW
CreateProfileFromLogColorSpaceW
CreateDeviceLinkProfile
gdi32
SetWindowOrgEx
GetWindowOrgEx
CreateDCA
CheckColorsInGamut
kernel32
ExitProcess
GetConsoleCursorInfo
GetProcAddress
GetModuleHandleW
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ