Static task
static1
Behavioral task
behavioral1
Sample
1117ba09763419d4d5b06c3b16e9d524d254bec36b838d6831576a38a7858976.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
1117ba09763419d4d5b06c3b16e9d524d254bec36b838d6831576a38a7858976.exe
Resource
win10v2004-20230703-en
General
-
Target
1117ba09763419d4d5b06c3b16e9d524d254bec36b838d6831576a38a7858976
-
Size
396KB
-
MD5
f0a06ddb8fd1e07c1475679df42a0862
-
SHA1
d517928677dbeb34e571cd4480ec4b0e3c1a4bc1
-
SHA256
1117ba09763419d4d5b06c3b16e9d524d254bec36b838d6831576a38a7858976
-
SHA512
9b5a69cd7adf9eca783e31e8402ea4f88305cd083f5fc63442c9d82b2d454f9082364dfdbce1249d83c8e5c8cd5c7a25a332b968985e3c1f37c3c7721337c6c3
-
SSDEEP
6144:9JlUE3uBI2MN0OwIPecSNsIbV0QccA+2sXbxdjUeAtA7rtqIpQx:/Jx2vOxPC1cNsFdjatA7rt2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1117ba09763419d4d5b06c3b16e9d524d254bec36b838d6831576a38a7858976
Files
-
1117ba09763419d4d5b06c3b16e9d524d254bec36b838d6831576a38a7858976.exe windows x86
02447c5014a95fc26262ac91358c6411
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
RegisterClassA
gdi32
CreateDIBitmap
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recvfrom
comdlg32
GetFileTitleA
Sections
.text Size: 304KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE