??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
a9e6c5afc7abb34a53e9dbe094d274e8b5de6a45cf91cce6d0d67ecee480dc38.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a9e6c5afc7abb34a53e9dbe094d274e8b5de6a45cf91cce6d0d67ecee480dc38.exe
Resource
win10v2004-20240802-en
General
-
Target
a9e6c5afc7abb34a53e9dbe094d274e8b5de6a45cf91cce6d0d67ecee480dc38
-
Size
374KB
-
MD5
ddafeb9ce0fa381dbae096499d6a8f7f
-
SHA1
8a51b6806779f3c37af69d64d347bd9f0a7c3b15
-
SHA256
a9e6c5afc7abb34a53e9dbe094d274e8b5de6a45cf91cce6d0d67ecee480dc38
-
SHA512
ffa29460fa3593bec550e33581f1e06811d0a5c45b21f35d3e87b677b1ce575f82a32af1d0df38b0f9afa058532dc690e47e2b6ecc002e468a03226df4c32abf
-
SSDEEP
6144:UpWLGKxAlruttHd3RW8AcTWLBx8LCD0/Rr32nywHrcjRCTt/A+sr1X1vuVySeeZ:Up+LxAlirx6LgCwr3jwHojRCTNMdwVkM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9e6c5afc7abb34a53e9dbe094d274e8b5de6a45cf91cce6d0d67ecee480dc38
Files
-
a9e6c5afc7abb34a53e9dbe094d274e8b5de6a45cf91cce6d0d67ecee480dc38.exe windows:5 windows x86 arch:x86
f2310c696f6c6a2964c06bb46f79aea6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
qt5core
??1QUrl@@QAE@XZ
qt5gui
??1QPen@@QAE@XZ
qt5widgets
??1QLabel@@UAE@XZ
qtlib
??1CBPBox@@UAE@XZ
user32
GetDC
gdi32
BitBlt
advapi32
FreeSid
shell32
ShellExecuteA
tbfilebrower
?GetNode@CEuFileSystemNodeMgr@@SAPAVCEuFileSystemNode@@K@Z
msvcp90
??_7ios_base@std@@6B@
msvcr90
free
shlwapi
PathFindOnPathA
netapi32
NetWkstaGetInfo
Exports
Exports
Sections
.MPRESS1 Size: 298KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE