Static task
static1
Behavioral task
behavioral1
Sample
9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56N.exe
Resource
win10v2004-20241007-en
General
-
Target
9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56N.exe
-
Size
282KB
-
MD5
4a51ce950183657dc66c428aab223280
-
SHA1
1c3bd0cef887a56762afefd140be48019c2624d3
-
SHA256
9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56
-
SHA512
402acb2073329999f0852b1b9239dfd5769033aee79c250df06353d5d4555529e2a8eeabd1520565144e65216bada7ed1b26b9c3b84383c5f405a096c8c6f58a
-
SSDEEP
6144:OLukrrarV55qNTMA4LBf0dJ5TTBZbspom7bXS:hkr055qNTQN0VTTbM/C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56N.exe
Files
-
9eaeefd3d75302a4ec997c9adc9bdef6dd3aedd379d779a05bdc9aa943a6bd56N.exe.exe windows:4 windows x86 arch:x86
7b374fbbc30f64eae2c88e5699283a53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GetComputerNameA
FindResourceW
GetModuleHandleA
lstrlenA
CreateFileW
GetCurrentDirectoryA
CloseHandle
SetLastError
CreateProcessA
LocalFree
HeapCreate
Sleep
lstrcpyA
PulseEvent
UnmapViewOfFile
LoadLibraryW
GetCurrentThreadId
GlobalUnlock
FindClose
user32
CallWindowProcA
SetFocus
DrawEdge
GetDlgItem
DrawMenuBar
FillRect
CreateWindowExA
GetDC
CreateIcon
GetCaretPos
CheckRadioButton
IsWindow
DispatchMessageA
cryptui
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll
CryptUIDlgSelectCA
appwiz.cpl
ConfigStartMenu
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mxukewd Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 162KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE