Static task
static1
Behavioral task
behavioral1
Sample
f42d0d331b8aea8cc70cc87c36c880f4c97d56c21ea790252cebe6dbfc557bca.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f42d0d331b8aea8cc70cc87c36c880f4c97d56c21ea790252cebe6dbfc557bca.exe
Resource
win10v2004-20240802-en
General
-
Target
f42d0d331b8aea8cc70cc87c36c880f4c97d56c21ea790252cebe6dbfc557bca
-
Size
13.1MB
-
MD5
4010ae80343e38b2c1b95776eb5513d1
-
SHA1
fe37dcb7403c9923584d205da4930869fd072252
-
SHA256
f42d0d331b8aea8cc70cc87c36c880f4c97d56c21ea790252cebe6dbfc557bca
-
SHA512
2a64aafbf5ad0d5477e593b90f5a385f78b6cfaac8613f57c66b58a5d3c69ec2f1f9e230045613c37a3d7a4c14e6fb0f0e43c01a18396eeb647d5425dcde5375
-
SSDEEP
196608:FFsvKX6nPt4aZWImscSGHjAqxr52QzSWPlLgWIe1jeSATHNmMnT2RI:ni1VZpmscSYffSWP2NyjexTHue
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f42d0d331b8aea8cc70cc87c36c880f4c97d56c21ea790252cebe6dbfc557bca
Files
-
f42d0d331b8aea8cc70cc87c36c880f4c97d56c21ea790252cebe6dbfc557bca.exe windows:6 windows x86 arch:x86
eac8654428354167abb76f8efe19413c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStringToAddressW
kernel32
GetVersionExW
user32
MessageBoxW
advapi32
CryptCreateHash
ole32
OleLockRunning
shlwapi
StrCmpW
gdiplus
GdipFree
winmm
PlaySoundW
bcrypt
BCryptDestroyHash
winhttp
WinHttpSetCredentials
crypt32
CertVerifyCertificateChainPolicy
gdi32
GetDeviceCaps
shell32
DragQueryFileW
oleaut32
SysAllocString
comctl32
InitCommonControlsEx
imm32
ImmGetContext
Sections
.text Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Re` Size: - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.{a) Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.LnR Size: 13.0MB - Virtual size: 13.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ