Static task
static1
Behavioral task
behavioral1
Sample
46ae96d38b8c780dd42854733a45b0c9c024e215b2c44d738b1b7b2861378c5fN.exe
Resource
win7-20241023-en
General
-
Target
46ae96d38b8c780dd42854733a45b0c9c024e215b2c44d738b1b7b2861378c5fN.exe
-
Size
868KB
-
MD5
dcbea4764827be169cfbf2a872b2b580
-
SHA1
ace7f57494fd36fce25e6f35abcd9a666a1cabbb
-
SHA256
46ae96d38b8c780dd42854733a45b0c9c024e215b2c44d738b1b7b2861378c5f
-
SHA512
67ba26a42d71c4b43609348f6b35f5522964acc1202c2c8d2f63fd971479485966c1e9b1f0345ea3e917c67e3db7fc4cfb5bc3c98c06cae48c7b66dfdc6d0721
-
SSDEEP
12288:BO2QLxzVhdf+5utolnQux+GthLM2X4hVc+5Y+vWcg4RalJaCvHl0h9RMXlRkh:BaLza5uDugu/CIwLkJlH2h9a16h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46ae96d38b8c780dd42854733a45b0c9c024e215b2c44d738b1b7b2861378c5fN.exe
Files
-
46ae96d38b8c780dd42854733a45b0c9c024e215b2c44d738b1b7b2861378c5fN.exe.exe windows:5 windows x86 arch:x86
4f9da83700db606ef10e479dd2f3089f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
HideCaret
advapi32
RegOpenKeyExW
shell32
SHGetPathFromIDListW
msimg32
AlphaBlend
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionW
ws2_32
WSAStartup
iphlpapi
GetAdaptersInfo
oleacc
AccessibleObjectFromWindow
gdiplus
GdipFree
imm32
ImmReleaseContext
winmm
PlaySoundW
gdi32
CreateHatchBrush
winspool.drv
DocumentPropertiesW
comdlg32
GetFileTitleW
ole32
OleGetClipboard
oleaut32
VariantClear
Sections
.text Size: 838KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE