Static task
static1
Behavioral task
behavioral1
Sample
73140a68b128f9ee1b760db71f576d38f686257c22b004f44a222c1106ea8bd2.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
73140a68b128f9ee1b760db71f576d38f686257c22b004f44a222c1106ea8bd2.exe
Resource
win10v2004-20230703-en
General
-
Target
73140a68b128f9ee1b760db71f576d38f686257c22b004f44a222c1106ea8bd2.bin
-
Size
2.2MB
-
MD5
d44c164cd02c0c92e98362a50ac4eff0
-
SHA1
6406150b4b26b9aa613bc54a8c1b2b4c5191583b
-
SHA256
73140a68b128f9ee1b760db71f576d38f686257c22b004f44a222c1106ea8bd2
-
SHA512
b412a9fc8021e05fc3b7d2bcdfd64c270daa0588eaa00961005ef2cf3f3d616356b3e9146a6d085528173bc6cfadffb7c763b0809f175a69180591f00fd55c4f
-
SSDEEP
49152:qDkkvPnPEcm7qgC/pQy6AjsKWWsPyFMPAEKme3GYnw:m/nccYq/SAj9B6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73140a68b128f9ee1b760db71f576d38f686257c22b004f44a222c1106ea8bd2.bin
Files
-
73140a68b128f9ee1b760db71f576d38f686257c22b004f44a222c1106ea8bd2.bin.exe windows x86
2f4a756dbfdc99f6df8dd519bd408d62
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
gethostname
winmm
mixerGetLineInfoW
version
GetFileVersionInfoSizeW
comctl32
ImageList_Create
psapi
GetModuleFileNameExW
wininet
InternetCloseHandle
kernel32
GetVersionExW
MoveFileW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxW
gdi32
CreateEllipticRgn
comdlg32
GetSaveFileNameW
advapi32
RegQueryValueExW
shell32
SHGetMalloc
ole32
CoCreateInstance
oleaut32
SysStringLen
Sections
.text Size: - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
]WGQF Size: - Virtual size: 967KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ZH?^a Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
#BSDd Size: - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
amDZi Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 790KB - Virtual size: 789KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ