Static task
static1
Behavioral task
behavioral1
Sample
f09662688422de79cec9d94b5b8b4998010b81cfcd283328c22f60c80959b01a.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
f09662688422de79cec9d94b5b8b4998010b81cfcd283328c22f60c80959b01a.exe
Resource
win10v2004-20240802-en
General
-
Target
f09662688422de79cec9d94b5b8b4998010b81cfcd283328c22f60c80959b01a
-
Size
15.9MB
-
MD5
58b0b4efd60bd79098fd4e255b2ad0d4
-
SHA1
a2601c226c9010b1e0a98296107d3a205fea7da8
-
SHA256
f09662688422de79cec9d94b5b8b4998010b81cfcd283328c22f60c80959b01a
-
SHA512
96165a0a53f37253756cb3207e73535c0ba60bac313ad5e0c00e8ada26d59d34ee7f65637815580d0af97da2eaa6a4b3d22e1fdd908fa214dcf21cbadf460c5d
-
SSDEEP
393216:7EcGp0kXXMW/yjaibteipdjiGnDDEEr2XKq0136DN5PTl:XBcWaibtrpJioDEhKq0QDb7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f09662688422de79cec9d94b5b8b4998010b81cfcd283328c22f60c80959b01a
Files
-
f09662688422de79cec9d94b5b8b4998010b81cfcd283328c22f60c80959b01a.exe windows:5 windows x86 arch:x86
c5685719318e56309e6e421614e7cfeb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetWindowThreadProcessId
advapi32
LookupPrivilegeValueA
wininet
InternetOpenA
ws2_32
recv
gdi32
CreateBitmap
winspool.drv
DocumentPropertiesA
comctl32
ord17
shlwapi
PathFileExistsA
shell32
SHGetSpecialFolderPathA
Sections
.text Size: - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.UNb Size: - Virtual size: 10.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.m|$ Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.f!j Size: 15.9MB - Virtual size: 15.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ