Static task
static1
Behavioral task
behavioral1
Sample
231fa8a7c6c6f1fbe1b9416bf19e1f9c6e09d5c815d14ebbf28692ae4571b550.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
231fa8a7c6c6f1fbe1b9416bf19e1f9c6e09d5c815d14ebbf28692ae4571b550.exe
Resource
win10v2004-20241007-en
General
-
Target
231fa8a7c6c6f1fbe1b9416bf19e1f9c6e09d5c815d14ebbf28692ae4571b550.exe
-
Size
272KB
-
MD5
5d2019b11efa06a03cf44a9014fbffe2
-
SHA1
04c40f1c947f13d417bbdc1ca5bbd9907c0ff859
-
SHA256
231fa8a7c6c6f1fbe1b9416bf19e1f9c6e09d5c815d14ebbf28692ae4571b550
-
SHA512
c60e3c030597e4ac5e9b1ace29b4062659370cf1185b5415fe86d95b551caa7fa3a69e51e600e6dfe2fbbc30a3b1c4244da47910369f591e8e8de247971edd55
-
SSDEEP
6144:luupvQP0sP7wBfndGZ/1+UcJ0oVzQ6OCn9IAuE6eGni+FjpyObkF1:3I06kBf2/11cJ3xO6UE6eSiqlVwF1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 231fa8a7c6c6f1fbe1b9416bf19e1f9c6e09d5c815d14ebbf28692ae4571b550.exe
Files
-
231fa8a7c6c6f1fbe1b9416bf19e1f9c6e09d5c815d14ebbf28692ae4571b550.exe.exe windows:4 windows x86 arch:x86
b050d59ca7c08b4e1c516a2bcebd8854
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GlobalGetAtomNameA
Sleep
GetTickCount
LoadLibraryW
GetPrivateProfileStringW
GetModuleFileNameW
GetPrivateProfileIntW
InitializeCriticalSection
MulDiv
GetVersionExA
GetVersionExW
GetProcAddress
LockResource
EnumResourceTypesW
FindFirstFileW
FreeLibrary
DeleteCriticalSection
GlobalSize
LoadLibraryA
GetModuleHandleW
IsDBCSLeadByteEx
FindClose
WritePrivateProfileStringW
LoadResource
MultiByteToWideChar
GetLocaleInfoW
shell32
DllGetVersion
ShellExecuteExA
SHFileOperationW
ShellExecuteExW
SHGetFileInfoA
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteW
SHGetFolderPathW
CommandLineToArgvW
Shell_NotifyIconA
wininet
InternetReadFile
HttpSendRequestA
InternetOpenA
InternetCrackUrlA
InternetCloseHandle
InternetTimeToSystemTime
InternetConnectA
HttpQueryInfoA
HttpOpenRequestA
InternetErrorDlg
InternetTimeFromSystemTime
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ