Static task
static1
Behavioral task
behavioral1
Sample
ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173.exe
Resource
win7-20240903-en
General
-
Target
ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173
-
Size
77KB
-
MD5
5f7079f7d1929930a355dd4f26f0bcb1
-
SHA1
e8c4c77c47d3cf184b85ebb8e3f2870d2a932667
-
SHA256
ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173
-
SHA512
9df88674e32ac33e325e5ec6d7a578566d2041c9e2fb2a439abf4a43a18dff45f6bf9c04805344f6b0dff24dfda11a6110d95310154a08b2bd06aef336983493
-
SSDEEP
1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1p:PLnFYZx7CeCEwre
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173
Files
-
ac79def9400e9b3ed7d17647fd2eb46cf25d2008a679a84294432f3365a68173.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
VDHDOJDO Size: - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VDHDOJDO Size: 76KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE