Static task
static1
Behavioral task
behavioral1
Sample
3a8d21520127dc4dba5a8be8a4cfe04eb2f6ca2e81b21c332cb5ab0e2da9a443.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3a8d21520127dc4dba5a8be8a4cfe04eb2f6ca2e81b21c332cb5ab0e2da9a443.exe
Resource
win10v2004-20230220-en
General
-
Target
3a8d21520127dc4dba5a8be8a4cfe04eb2f6ca2e81b21c332cb5ab0e2da9a443
-
Size
5.7MB
-
MD5
0db5ab24a02df02acfb73ec589773b4c
-
SHA1
ebb8ec44c2fadd3d4d4b9c87d47cf498d406f0ec
-
SHA256
3a8d21520127dc4dba5a8be8a4cfe04eb2f6ca2e81b21c332cb5ab0e2da9a443
-
SHA512
9baf1b1092f17419f818427d02d715a8b11f2d42d18558bc019024f89036aa50e90470b087f344b9f07e9a8bd536c963e8d5239f051e0058ce7ad37ec99c2955
-
SSDEEP
98304:JA+Uu5iWsETul3zl/k60r2fpaqOUH8lU3a8EEMTYgGM:JA+bTut5kdrmL1392YgGM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3a8d21520127dc4dba5a8be8a4cfe04eb2f6ca2e81b21c332cb5ab0e2da9a443
Files
-
3a8d21520127dc4dba5a8be8a4cfe04eb2f6ca2e81b21c332cb5ab0e2da9a443.exe windows x86
ccf9156c869db26b6013c3347b88d743
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
socket
rasapi32
RasHangUpA
kernel32
GetWindowsDirectoryA
user32
GetMenuCheckMarkDimensions
gdi32
ExcludeClipRect
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantCopyInd
comctl32
ImageList_GetIcon
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp1 Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE