Static task
static1
Behavioral task
behavioral1
Sample
57ba55e996eecb433475c4652a4a7dbecb039789fd901b4e55b9488ea452b613.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
57ba55e996eecb433475c4652a4a7dbecb039789fd901b4e55b9488ea452b613.exe
Resource
win10v2004-20240802-en
General
-
Target
57ba55e996eecb433475c4652a4a7dbecb039789fd901b4e55b9488ea452b613
-
Size
11.9MB
-
MD5
cbd2f0d7f7d8eb213e4905146328f368
-
SHA1
b75d9992f5d4b1c85ae0e5c71c48494401dc9112
-
SHA256
57ba55e996eecb433475c4652a4a7dbecb039789fd901b4e55b9488ea452b613
-
SHA512
ac857d142ebe6d22cfc994ed6bf1c6a8965075cd15f5102dc9f5e283b2224110e976c338b2bb175b4cc15c83cfc54ea2a22612d9eeff65fdb878dcf5f2ae6da2
-
SSDEEP
196608:RoTAYFyphIaptwTkr7YYtdvymTxayDnN2u5E9xgftBLjS1Jr0q:0AYFShjwLYtUyDNkXoB2r0q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57ba55e996eecb433475c4652a4a7dbecb039789fd901b4e55b9488ea452b613
Files
-
57ba55e996eecb433475c4652a4a7dbecb039789fd901b4e55b9488ea452b613.exe windows:5 windows x86 arch:x86
347fcf2188f53e47fb5c64a6621695f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalFree
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetUserObjectInformationW
advapi32
ReportEventA
netapi32
Netbios
msvcrt
_strnicmp
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
shell32
SHGetFolderPathW
Sections
vmp Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmp Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmp Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vmp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vmp Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
vmp Size: 4KB - Virtual size: 484B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmp Size: 9.4MB - Virtual size: 9.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmp Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
vmp Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
vmp Size: 840KB - Virtual size: 839KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
vmp Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ