Static task
static1
Behavioral task
behavioral1
Sample
77fadc64d731fe5c0e828177a7b99ba28e4d99ba8059f55cb2cdc63f924a1d01.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
77fadc64d731fe5c0e828177a7b99ba28e4d99ba8059f55cb2cdc63f924a1d01.exe
Resource
win10v2004-20240802-en
General
-
Target
77fadc64d731fe5c0e828177a7b99ba28e4d99ba8059f55cb2cdc63f924a1d01
-
Size
6.3MB
-
MD5
5f8b27cd0119000560feae46fd62189d
-
SHA1
55ed648a3df41f1f2cbc9b2040f2485fd7a74564
-
SHA256
77fadc64d731fe5c0e828177a7b99ba28e4d99ba8059f55cb2cdc63f924a1d01
-
SHA512
15da4bdc7e8501473f1845fdee9257bdde7afd3b7dcc8472c1619929c025d0cc6101e449364e233b00ce75f32ae6b5eac5588771f01dc0e260d4ff886b179836
-
SSDEEP
98304:aj1E1GtrQrs1wlbJri9I1xyOpdbg633U6NL2ZbUExC5/veA/hwr2MakL64GjIwlH:I1EkeAYiyxymNU6Z2Z3xCtvb0aVNlTz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77fadc64d731fe5c0e828177a7b99ba28e4d99ba8059f55cb2cdc63f924a1d01
Files
-
77fadc64d731fe5c0e828177a7b99ba28e4d99ba8059f55cb2cdc63f924a1d01.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 5.2MB - Virtual size: 23.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hlohbiom Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cmctiupp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE