Static task
static1
Behavioral task
behavioral1
Sample
9debe6a8af7bc056446cde4d9f78313a7f4287373df9b06ac99c66b7e7073ae7.exe
Resource
win7-20241010-en
General
-
Target
9debe6a8af7bc056446cde4d9f78313a7f4287373df9b06ac99c66b7e7073ae7
-
Size
10.0MB
-
MD5
03fa573d65899ac631f3f8a3aee5144d
-
SHA1
a951a65241e98ac6758a19a1a57dc707aeac19a0
-
SHA256
9debe6a8af7bc056446cde4d9f78313a7f4287373df9b06ac99c66b7e7073ae7
-
SHA512
b2af9dc31c7af2c8a6156cb4caed16fe9f0b69bbdd1f8f3d1e41e5e53f680ef0e19eb53fc362db340fcde674e43ffed2ebf1c1aa667e66b95029da05d5fc000f
-
SSDEEP
196608:w0Myz+9kQoF72I54E9QLiJOYAuhjDEmf4Cu7j/68Y5zUC828p:Hz+OQoF2IaE9QLgOYTPEGuXi88zSp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9debe6a8af7bc056446cde4d9f78313a7f4287373df9b06ac99c66b7e7073ae7
Files
-
9debe6a8af7bc056446cde4d9f78313a7f4287373df9b06ac99c66b7e7073ae7.exe windows:4 windows x86 arch:x86
397865c786c4c8766a601cbd893174f5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueA
comctl32
_TrackMouseEvent
Sections
.text Size: 1.2MB - Virtual size: 26.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE