??4_Init_locks@std@@QAEAAV01@ABV01@@Z
Static task
static1
Behavioral task
behavioral1
Sample
9e2beca99f2ec114067bfb205084056447aa61e0a601cce316de728c08843528.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9e2beca99f2ec114067bfb205084056447aa61e0a601cce316de728c08843528.exe
Resource
win10v2004-20240802-en
General
-
Target
9e2beca99f2ec114067bfb205084056447aa61e0a601cce316de728c08843528
-
Size
672KB
-
MD5
12250b3dbe5f2f53ae130214401121f9
-
SHA1
949b6085e4332cf1c45010b7bc33a26f2a981ac0
-
SHA256
9e2beca99f2ec114067bfb205084056447aa61e0a601cce316de728c08843528
-
SHA512
51911f0c5c98637c4ae445389c7a2de31da1c873b6cf54f6ed932761d31458e63ff50b925b7ffd514d98121343aac19a42df0aafc4e0c884b903dc9560e1c0aa
-
SSDEEP
6144:3wQyFIA5knuSg8XbI3bZpr2NHutUqCb4N/sMf9LfqhsbyiUOSZmyBh+2Lxfy:3wQyK0knuSg8GGEBCbs/ZquyRZN1L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e2beca99f2ec114067bfb205084056447aa61e0a601cce316de728c08843528
Files
-
9e2beca99f2ec114067bfb205084056447aa61e0a601cce316de728c08843528.exe windows:5 windows x86 arch:x86
994f6159dfa67d681eb9d1a2e2d144b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
qt5core
??1QUrl@@QAE@XZ
qt5gui
??0QPen@@QAE@XZ
qt5widgets
??1QMenu@@UAE@XZ
qtlib
??1CBPBox@@UAE@XZ
user32
GetDC
gdi32
BitBlt
advapi32
FreeSid
shell32
ShellExecuteA
tbfilebrower
?GetNode@CEuFileSystemNodeMgr@@SAPAVCEuFileSystemNode@@K@Z
msvcp90
??_7ios_base@std@@6B@
msvcr90
free
version
VerQueryValueW
shlwapi
PathFileExistsA
netapi32
NetWkstaGetInfo
Exports
Exports
Sections
.MPRESS1 Size: 304KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 363KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE