Static task
static1
Behavioral task
behavioral1
Sample
3f0fb901eac03e938b8ad8e5d4241fac452329458d295ea9ec1ebfcc7458a7a1.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
3f0fb901eac03e938b8ad8e5d4241fac452329458d295ea9ec1ebfcc7458a7a1.exe
Resource
win10v2004-20230703-en
General
-
Target
3f0fb901eac03e938b8ad8e5d4241fac452329458d295ea9ec1ebfcc7458a7a1
-
Size
290KB
-
MD5
65e8b11af3e454d4378f56e8e34f6543
-
SHA1
7022f9e6935ec23a2e32734df53c9ae5bb8d95f0
-
SHA256
3f0fb901eac03e938b8ad8e5d4241fac452329458d295ea9ec1ebfcc7458a7a1
-
SHA512
653d46f89043773c21f3e97dbc1d5e57d6c7fb14765a914b6336377954f33dbebdc995afe1de6c6ef4838c355638d57791f4e7b4ddad1e313c4893a51d2de584
-
SSDEEP
6144:JtrRy9Q7+WbTbDrlodDiEVkE7MhC3sJwX+D1+8LXKgLdrgggz:frRy9Q7xvbukEJ3OZrW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f0fb901eac03e938b8ad8e5d4241fac452329458d295ea9ec1ebfcc7458a7a1
Files
-
3f0fb901eac03e938b8ad8e5d4241fac452329458d295ea9ec1ebfcc7458a7a1.exe windows x86
0de4ac7f4642e3f5c77c755eb992aa8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
dhplay
ord97
user32
EqualRect
gdi32
SetRectRgn
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegDeleteKeyW
shell32
SHBrowseForFolderW
comctl32
ImageList_GetIconSize
shlwapi
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoRegisterMessageFilter
oleaut32
SysAllocString
Sections
.text Size: 262KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE