Static task
static1
Behavioral task
behavioral1
Sample
91d4c7bce9ffcb44a501ac9657399f6d006ac26a3bf2fa1cfd115d6abc66cf6b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
91d4c7bce9ffcb44a501ac9657399f6d006ac26a3bf2fa1cfd115d6abc66cf6b.exe
Resource
win10v2004-20230220-en
General
-
Target
91d4c7bce9ffcb44a501ac9657399f6d006ac26a3bf2fa1cfd115d6abc66cf6b
-
Size
678KB
-
MD5
b2fb1c0aace13390e6ddd07297e04918
-
SHA1
7cf9cffd1e618dcc4bda6323c276b04afd68f251
-
SHA256
91d4c7bce9ffcb44a501ac9657399f6d006ac26a3bf2fa1cfd115d6abc66cf6b
-
SHA512
16ff01e81b58388b4598e45479130ae5efc4d6aa8d17a24b99db334a6ead87b94472198ec5155f74838047ea645bf6fea34465ab0b534528c7fad1fad439cbbb
-
SSDEEP
12288:pitzxBT1dc1yexVo6pyK3EUnKwtA0Q+qiYivBFLuKMuklTuL/btI:EdBjNEE+r60Q+qiYiv3FMjTurb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91d4c7bce9ffcb44a501ac9657399f6d006ac26a3bf2fa1cfd115d6abc66cf6b
Files
-
91d4c7bce9ffcb44a501ac9657399f6d006ac26a3bf2fa1cfd115d6abc66cf6b.exe windows x86
b5f80dcb9bd0f432b1ce7a7320f14176
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
shlwapi
StrCmpNA
user32
SetParent
gdi32
CreateRectRgn
comdlg32
GetOpenFileNameA
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
comctl32
ImageList_Draw
oledlg
ord8
ole32
CoTaskMemAlloc
olepro32
ord253
oleaut32
VariantClear
Sections
.text Size: 668KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE