Static task
static1
Behavioral task
behavioral1
Sample
2.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2.exe
Resource
win10v2004-20240802-en
General
-
Target
2.exe
-
Size
29.2MB
-
MD5
eb345e557579c10c4c89a44e443986c6
-
SHA1
526b604b6332e0af8994c025a9b471515ee39f82
-
SHA256
25747e078bc6a6fae281cd9d7e9b4ed47c9f6576549ff9abd1846b16f09c0823
-
SHA512
66b460c405ba5a5719f29bef8634069ae172cc4d6ca6bbcbb070f21cf5901257cde561be9888ba4b9760dc72810ba9828d075a43cfeef18776c4d46931b4d97e
-
SSDEEP
786432:ntlhTMuXD78tdnG2YWaDVF+dwBZ/4baEnWicJmzc:tleEDMdnGlSy/4eBMc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2.exe
Files
-
2.exe.exe windows:5 windows x86 arch:x86
43ca15a63f87404c8738b3606d76dfb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
TerminateProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CreateWindowExA
gdi32
GetDeviceCaps
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
DragQueryFileA
comctl32
_TrackMouseEvent
shlwapi
PathStripToRootA
oledlg
ord8
ole32
CoCreateInstance
oleaut32
SafeArrayUnaccessData
wininet
InternetOpenA
gdiplus
GdipGetImageHeight
imm32
ImmAssociateContext
ws2_32
ntohs
winhttp
WinHttpCrackUrl
Sections
.text Size: - Virtual size: 981KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data30 Size: - Virtual size: 26.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data31 Size: 29.1MB - Virtual size: 29.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ