Static task
static1
Behavioral task
behavioral1
Sample
9a55f08b4d828ae49e7cbe1d6503dc05bd78b67452c7d5128f2005c34c15bb41.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9a55f08b4d828ae49e7cbe1d6503dc05bd78b67452c7d5128f2005c34c15bb41.exe
Resource
win10v2004-20240802-en
General
-
Target
9a55f08b4d828ae49e7cbe1d6503dc05bd78b67452c7d5128f2005c34c15bb41
-
Size
5.5MB
-
MD5
e2f4857bb10c429b8b39cea9ca3abf4e
-
SHA1
c0d9f86f69bb924de68568a0fa0899090dac1f35
-
SHA256
9a55f08b4d828ae49e7cbe1d6503dc05bd78b67452c7d5128f2005c34c15bb41
-
SHA512
92b6cbc643356f8b1dd23d6f957308cd9ed6f081b350db259a178d3f9ceae72d4e2ae34674837f12a36f43a3a4701cb5e7651bce9fdccc436b6a1e4ea4230d16
-
SSDEEP
98304:lq0zNvVUI7hTmT/tRGb49Lcfdnu9ozfMWKks7bMLDxOrrM1/rAIrvDruy1n4DokG:RzxVUI7hg/ts6L2du9ozfMWLs7wLFGA5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a55f08b4d828ae49e7cbe1d6503dc05bd78b67452c7d5128f2005c34c15bb41
Files
-
9a55f08b4d828ae49e7cbe1d6503dc05bd78b67452c7d5128f2005c34c15bb41.exe windows:5 windows x86 arch:x86
a54e630d374193454f1bcffa60b16cab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
CreateErrorInfo
advapi32
RegCreateKeyExA
user32
GetWindowThreadProcessId
kernel32
GlobalSize
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
gdi32
SetMapMode
version
GetFileVersionInfoSizeA
mpr
WNetGetConnectionA
ole32
CoInitializeEx
comctl32
InitCommonControls
urlmon
URLDownloadToFileA
shell32
SHGetMalloc
comdlg32
GetOpenFileNameA
wsock32
WSAAsyncGetServByName
winmm
timeGetTime
netapi32
Netbios
Sections
.text Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 47KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 80B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ