Static task
static1
Behavioral task
behavioral1
Sample
9ae5088fe7dedc2e5f06dd9509795f91537c957c9c06212364fe04268a547364.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
9ae5088fe7dedc2e5f06dd9509795f91537c957c9c06212364fe04268a547364.exe
Resource
win10v2004-20241007-en
General
-
Target
9ae5088fe7dedc2e5f06dd9509795f91537c957c9c06212364fe04268a547364
-
Size
2.2MB
-
MD5
4b2bae323689821b6762ebc5cbdcc9a8
-
SHA1
e4ff9e37f967672d7e69b61a22fe6bfd7ffd40f7
-
SHA256
9ae5088fe7dedc2e5f06dd9509795f91537c957c9c06212364fe04268a547364
-
SHA512
4422a062f2b5f2ff4fcf70c458ca6ed6abee141379315e9afe5c278dfeadedeaba269e41c9eadce0aed90edc748ea2bf029a58bae773cdfdf009e524d7a94e54
-
SSDEEP
49152:jn6zNcvBJTfoNKTDSjVUO97ACrqLoJjX4Ay3WihGeEH/8PI5XxdUvCThNVzHcVIT:jANWJzogT+jVz5ACrqcJMv3WioqSUvCb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ae5088fe7dedc2e5f06dd9509795f91537c957c9c06212364fe04268a547364
Files
-
9ae5088fe7dedc2e5f06dd9509795f91537c957c9c06212364fe04268a547364.exe windows:6 windows x86 arch:x86
d06437f4bca1e28633750edf6b1b2c5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
qt5winextras
??1QWinTaskbarButton@@UAE@XZ
qt5network
??1QNetworkRequest@@QAE@XZ
wtsapi32
WTSFreeMemory
heif
heif_context_free
user32
GetDC
gdi32
DeleteDC
advapi32
RegOpenKeyExW
shell32
SHGetFileInfoA
qt5widgets
??1QFrame@@UAE@XZ
qt5gui
??1QIcon@@QAE@XZ
qt5core
??1QUrl@@QAE@XZ
iphlpapi
GetAdaptersInfo
Sections
.MPRESS1 Size: 2.1MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE