Static task
static1
Behavioral task
behavioral1
Sample
abe2220a80d1a33627ff826ddf41846ff632ef6db7d63c0cec0d5e8497387671.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
abe2220a80d1a33627ff826ddf41846ff632ef6db7d63c0cec0d5e8497387671.exe
Resource
win10v2004-20240802-en
General
-
Target
abe2220a80d1a33627ff826ddf41846ff632ef6db7d63c0cec0d5e8497387671
-
Size
7.0MB
-
MD5
52046f5d4992222e23c82772ae475b0f
-
SHA1
32304f63d88e0fc10a1d8305b9ca2035c30a6490
-
SHA256
abe2220a80d1a33627ff826ddf41846ff632ef6db7d63c0cec0d5e8497387671
-
SHA512
cf0edc8fe2805075cf58367cc1eef1ac60cec7408c4991ad3cb9e8e4825baabb66505ae2aaeed9d35085e405aef2d7488967d1aca6fa0072581d2859090fa933
-
SSDEEP
98304:hxAsQCyEnda3coqA+ppaLx1Y7+3NBqlak8nyS05TbU/7ED2IB+O2Xgikpzy8:7ARCRA3afcW7QNIlakJU7Xfkpz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abe2220a80d1a33627ff826ddf41846ff632ef6db7d63c0cec0d5e8497387671
Files
-
abe2220a80d1a33627ff826ddf41846ff632ef6db7d63c0cec0d5e8497387671.exe windows:6 windows x64 arch:x64
737da35be69725cae07f3514a87338e0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
libcef
cef_string_multimap_size
kernel32
GetVersionExW
GetCurrentProcess
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ReleaseCapture
CharUpperBuffW
gdi32
GetPixel
msimg32
AlphaBlend
winspool.drv
DocumentPropertiesW
advapi32
RegDeleteValueW
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
shell32
SHGetPathFromIDListW
comctl32
InitCommonControlsEx
shlwapi
PathFindExtensionW
uxtheme
GetThemeSysColor
ole32
CoTaskMemAlloc
oleaut32
LoadTypeLi
oledlg
OleUIBusyW
gdiplus
GdipDrawImageRectI
oleacc
AccessibleObjectFromWindow
imm32
ImmReleaseContext
winmm
PlaySoundW
wtsapi32
WTSSendMessageW
Sections
.text Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 793KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 202KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 206KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ