Static task
static1
Behavioral task
behavioral1
Sample
Windows Progman Group Converter.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Windows Progman Group Converter.exe
Resource
win10-20240404-en
Behavioral task
behavioral3
Sample
Windows Progman Group Converter.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
Windows Progman Group Converter.exe
Resource
win11-20240802-en
General
-
Target
Windows Progman Group Converter.exe
-
Size
3.2MB
-
MD5
2dfad9199e9d87f6f13dca71de4edb6d
-
SHA1
9fac28af8904f2b8eb7e3298924efac22df5d78e
-
SHA256
76517aa2b97efce9cc0e986ff57ea04df4c8682bc66d92b4168e41ae93b444cd
-
SHA512
cbe05453a6252b74cc88f62171c0d209c26ef5a09d641854ce5643055c68cdcc8fb4c9138d977409bfc60302977ba71c33b8f8ca655b2014ca43e78c7dad247b
-
SSDEEP
49152:eXzVHgGuDHrEKlb5LN9YsWydCQqflH6hSc5XvqgxAtyWGJVAsAxPvBTTVcm6ik:eXDubrE65QwdC3ah5XvyyWGA7x3Pc8k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Windows Progman Group Converter.exe
Files
-
Windows Progman Group Converter.exe.exe windows:6 windows x64 arch:x64
Password: 123
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
"|R Size: - Virtual size: 12.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
b�bbb Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�bb�K Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE