Static task
static1
Behavioral task
behavioral1
Sample
d95f709f125b664e053458472ea81722f8ffacfa36a696f2a864bc1ec3b06166.exe
Resource
win7-20250207-en
Behavioral task
behavioral2
Sample
d95f709f125b664e053458472ea81722f8ffacfa36a696f2a864bc1ec3b06166.exe
Resource
win10v2004-20250217-en
General
-
Target
d95f709f125b664e053458472ea81722f8ffacfa36a696f2a864bc1ec3b06166
-
Size
74KB
-
MD5
0226658c7a28eda3f8509d4bd571df53
-
SHA1
f740b4be3ff2bab54a1be9ab9be160d6c6bd0b42
-
SHA256
d95f709f125b664e053458472ea81722f8ffacfa36a696f2a864bc1ec3b06166
-
SHA512
d55cf478772fa82b3b1d1f47264b0ebb1ffcc01ee312df80d826dc3aa82493dbcfb785f03a513bbd5185a874650280d092859c38b57efec03d4bc074553888bf
-
SSDEEP
1536:e6q10k0EFjed6rqJ+6vghzwYu7vih9GueIh9j2IoHAcBHUIF2kvEHrH1hyhuhrho:E1oEFlt6vghzwYu7vih9GueIh9j2IoHn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d95f709f125b664e053458472ea81722f8ffacfa36a696f2a864bc1ec3b06166
Files
-
d95f709f125b664e053458472ea81722f8ffacfa36a696f2a864bc1ec3b06166.exe windows:4 windows x86 arch:x86
23d47cbef5ef7b970f550a993e2e8f04
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegOpenKeyA
iphlpapi
GetAdaptersInfo
wininet
InternetOpenA
user32
wsprintfA
Sections
.MPRESS1 Size: 21KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1024B - Virtual size: 1021B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE