Static task
static1
Behavioral task
behavioral1
Sample
8421ee120052d1929b0f23bc01d4f14a6f215c53859666596478f64a240dd8abN.exe
Resource
win7-20240903-en
General
-
Target
8421ee120052d1929b0f23bc01d4f14a6f215c53859666596478f64a240dd8abN.exe
-
Size
79KB
-
MD5
a8f66777bacc19d0ec304b2a5a5e69f0
-
SHA1
f0805638985fde45bb8024ea1cbd727747d666ea
-
SHA256
8421ee120052d1929b0f23bc01d4f14a6f215c53859666596478f64a240dd8ab
-
SHA512
90691c21d028f50f854b3ba10ba24523b43f256c45522ba22ff7eabeab430e1b554a800c844fe0357158f21694548184217d0486dcd7f2d370afa4b133006c25
-
SSDEEP
1536:/tUknV9M6+ygXCNoNGtmFWZPhV8owtnMQPo9NSw249gdhwA2jeddCj:fCygXkoNGtmQZ5wbAzSm9gdhj2aMj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8421ee120052d1929b0f23bc01d4f14a6f215c53859666596478f64a240dd8abN.exe
Files
-
8421ee120052d1929b0f23bc01d4f14a6f215c53859666596478f64a240dd8abN.exe.exe windows:5 windows x86 arch:x86
ddb07c80ddc853d1a8c5be97deb3f5cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
LogonUserA
comdlg32
PrintDlgA
gdi32
EndDoc
mpr
WNetAddConnection2A
netapi32
NetServerEnum
user32
SetCursor
version
VerQueryValueA
ws2_32
WSAStartup
Sections
.MPRESS1 Size: 73KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE