Static task
static1
Behavioral task
behavioral1
Sample
c903b0ff5f361f426c49ce9b1c6c09f9749529b45d2a70a5459f00741c08b745.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
c903b0ff5f361f426c49ce9b1c6c09f9749529b45d2a70a5459f00741c08b745.exe
Resource
win10v2004-20230220-en
General
-
Target
c903b0ff5f361f426c49ce9b1c6c09f9749529b45d2a70a5459f00741c08b745
-
Size
75KB
-
MD5
c1d5fa6edcd72bc9a8c3df90dc11e7d5
-
SHA1
381739074726a97087c4b6c38811d5c1eb85ad49
-
SHA256
c903b0ff5f361f426c49ce9b1c6c09f9749529b45d2a70a5459f00741c08b745
-
SHA512
42daf422171d47cd5a08880c78be674b51beda3795e25237c8ff102fa102ea07fef292fd8bdac4b84455d189d62686c695e2f7dbb926d0291a1a884bffb87f5d
-
SSDEEP
768:lsXxcfb4TJtaC87PUoJBETGRzn9028Ac8G3JjJ4OEjQRwy8pnHNM/xvkK04:XC8ooj9Rz6bUGZlJEjQRwxRNei
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c903b0ff5f361f426c49ce9b1c6c09f9749529b45d2a70a5459f00741c08b745
Files
-
c903b0ff5f361f426c49ce9b1c6c09f9749529b45d2a70a5459f00741c08b745.exe windows x86
ac5dc484dd58f008cef813b9ab3f3475
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord1411
ord688
ord574
ord633
ord1586
ord1565
ord140
ord194
ord249
ord1233
ord440
ord819
ord949
ord733
ord1540
ord573
ord432
ord571
ord1013
ord431
ord1459
ord541
ord1426
ord356
ord1484
ord1487
ord845
ord846
ord692
ord476
ord725
ord635
ord1239
ord455
ord843
ord1601
ord951
ord728
ord967
ord593
ord1583
ord1582
ord1579
ord669
ord698
ord847
ord799
ord1595
ord837
ord1329
ord1560
ord830
ord829
ord1581
ord826
ord596
ord730
user32
ord2358
ord2290
ord1838
ord2268
ord2067
ord1750
ord1839
ord1581
ord1780
ord1747
ord1828
ord1813
ord1998
ord2162
ord2475
ord2118
ord1959
ord1522
ord1752
ord2105
ord2051
ord2375
ord1694
ord2319
ord2285
ord2318
ord2323
ord2096
ord1627
ord2389
gdi32
ord1105
ord1402
ord1550
ord1399
ord1035
ord1942
ord1925
ord1882
ord1065
ord1070
comdlg32
ord113
msvfw32
GetOpenFileNamePreviewA
avifil32
AVIFileExit
AVIStreamRelease
AVIFileOpenA
AVIStreamSetFormat
AVIFileInit
AVIMakeCompressedStream
AVIFileCreateStreamA
AVIFileRelease
AVIStreamWrite
AVISaveOptions
winmm
ord183
ord186
ord184
ord187
ord180
ord144
ord185
ord191
ord171
ord192
comctl32
ord82
ord16
ord17
mmxaudio
ord82
ord79
mpegsys
ord46
ord34
svdvideo
ord100
ord87
ord84
ord82
ord75
ord83
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 367KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ