Static task
static1
Behavioral task
behavioral1
Sample
Iwvjr.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Iwvjr.exe
Resource
win10v2004-20240802-en
General
-
Target
Iwvjr.exe
-
Size
25.5MB
-
MD5
098e5de87d4f0b2d84b94178f58b9a90
-
SHA1
80126f6e923791632fa879fa8c546bb9e8a18d2b
-
SHA256
f6e3171dd31f533697bff9bbb7a0ae75dabdb6b84d36ddd919a9bf4722866e09
-
SHA512
3ffb33b71a9b1ab049583cbc9a1fa6cd9225daa631b1834fd6ee431b0d1249f62fad412bad28f81d888ee961799d772bb0b567b0a640bc1539521e0b10d89410
-
SSDEEP
393216:SNnj2lLPiNiA5CJyQuMnynPvF5hd1C6CWLf2+3n6yM8VBmXEHU2B2:8n6J6oAzQonPtZbf/M8VBmXEHR2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Iwvjr.exe
Files
-
Iwvjr.exe.exe windows:6 windows x64 arch:x64
ac1544986c90b3fa85f4f753a7427440
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ole32
OleInitialize
oleaut32
VariantInit
ntdll
RtlUnwind
shlwapi
StrStrIA
wtsapi32
WTSFreeMemory
uxtheme
OpenThemeData
dwmapi
DwmEnableBlurBehindWindow
gdi32
GetCharABCWidthsW
imm32
ImmSetCandidateWindow
iphlpapi
ConvertInterfaceLuidToIndex
crypt32
CertGetCertificateChain
advapi32
SystemFunction036
user32
ToAscii
userenv
GetUserProfileDirectoryW
version
GetFileVersionInfoSizeW
netapi32
NetShareEnum
kernel32
ReleaseSRWLockExclusive
winmm
PlaySoundW
shell32
SHGetKnownFolderPath
ws2_32
WSASendTo
Sections
.text Size: - Virtual size: 11.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 438KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qtmetad Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qtmimed Size: - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 10.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23.4MB - Virtual size: 23.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ