Static task
static1
Behavioral task
behavioral1
Sample
d68ccadac84b3f1fd1f3a154ac239232ccce924aa95bda341feea4633209d5e2.exe
Resource
win7-20240508-en
General
-
Target
d68ccadac84b3f1fd1f3a154ac239232ccce924aa95bda341feea4633209d5e2
-
Size
14.9MB
-
MD5
1c17e2c89f4fd5d4e743e9c2a81f3dff
-
SHA1
b147fe89654dcce5bc03a5ab3f67b9792a6b972b
-
SHA256
d68ccadac84b3f1fd1f3a154ac239232ccce924aa95bda341feea4633209d5e2
-
SHA512
c4c689584f0580b3ed5e7a61863bd056d73c91546c7fcc56aad8008a8ac83d9d85198dc1fbb04241037b9835f3860b67d115e709ed519602b07fdf948dd95354
-
SSDEEP
196608:WGKcwRr/TfE/cxKdQxqDwDqYEqfT4LK2yaKXFvK2jweOuc+4Szuua1/QX/FX:1wN/o/vdQx3G2a0bjjOh+jzbS/QX/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d68ccadac84b3f1fd1f3a154ac239232ccce924aa95bda341feea4633209d5e2
Files
-
d68ccadac84b3f1fd1f3a154ac239232ccce924aa95bda341feea4633209d5e2.exe windows:4 windows x86 arch:x86
5fcd53e7a9cb37c7bedfc81b692aa0a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
WaitForInputIdle
kernel32
GetVersionExA
GetVersion
GetVersion
GetVersionExA
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
gdi32
LPtoDP
ws2_32
WSACleanup
atl
ord42
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueExA
comctl32
ImageList_SetBkColor
oledlg
ord8
ole32
OleRun
oleaut32
VariantCopy
winmm
midiOutUnprepareHeader
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
rasapi32
RasGetConnectStatusA
comdlg32
GetSaveFileNameW
shell32
DragFinish
wininet
InternetCrackUrlA
Sections
.text Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 12.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 844KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.my0 Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.my1 Size: 14.8MB - Virtual size: 14.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ