Static task
static1
Behavioral task
behavioral1
Sample
62d262c905bc81645c950974eb16c7f756dc1220e0e1d8e3a4440dc48d9cb6f5.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
62d262c905bc81645c950974eb16c7f756dc1220e0e1d8e3a4440dc48d9cb6f5.exe
Resource
win10v2004-20241007-en
General
-
Target
62d262c905bc81645c950974eb16c7f756dc1220e0e1d8e3a4440dc48d9cb6f5
-
Size
419KB
-
MD5
45477832ab3a02216f8565514fba13ab
-
SHA1
ec994648a4753238b0cf2b623fa9dbf33b99bf44
-
SHA256
62d262c905bc81645c950974eb16c7f756dc1220e0e1d8e3a4440dc48d9cb6f5
-
SHA512
207bea8d9b48db79e5a9784605c5807eaa91fdeddb455d930af055013f8d78cc8ab2580bb1b12b4d5c3f4011752fec9280dcc2dec1084fc79f8dc4c0a10dfc93
-
SSDEEP
6144:VmjGSNxZ0G6h8xZw/o08nlZXjnBDP2AliGy:O7dbP04DZzUGy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62d262c905bc81645c950974eb16c7f756dc1220e0e1d8e3a4440dc48d9cb6f5
Files
-
62d262c905bc81645c950974eb16c7f756dc1220e0e1d8e3a4440dc48d9cb6f5.exe windows:4 windows x86 arch:x86
8bf5647ac17d048301a655b90d75b33b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
VirtualProtect
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateFileA
CreateFileW
WriteFile
CloseHandle
GetLocalTime
VirtualQuery
CreateFileMappingW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
GetSystemInfo
VirtualProtectEx
user32
wsprintfA
shlwapi
ord158
msvbvm60
__vbaVarSub
Sections
.text Size: - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.virbox Size: - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vdata0 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vdata1 Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.virbox3 Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE