Static task
static1
Behavioral task
behavioral1
Sample
a31e307c4000689576a04922e57a239955e6c201f813329eb1ce7b90475b1b51.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a31e307c4000689576a04922e57a239955e6c201f813329eb1ce7b90475b1b51.exe
Resource
win10v2004-20230703-en
General
-
Target
a31e307c4000689576a04922e57a239955e6c201f813329eb1ce7b90475b1b51
-
Size
2.4MB
-
MD5
00850b6b0f9b52f90ac501998db62b2d
-
SHA1
ad286d82a6fd96374fc223b0b5ce704118ca1e95
-
SHA256
a31e307c4000689576a04922e57a239955e6c201f813329eb1ce7b90475b1b51
-
SHA512
18871980b351c689064d5e941f5aecb8fc6362a7acb84e88c74b7aa1c650c1de0c1bdae8031e31ad44fded16d202efae546568c1ebdcea135a1372eee67c6494
-
SSDEEP
49152:Gv2EG9ih735LR2bwMWmYN3A1wZ/SHVs8hCcfq1+fa2GC:55Y7ZRqNYN3ASZ/qVs8hCcfjG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a31e307c4000689576a04922e57a239955e6c201f813329eb1ce7b90475b1b51
Files
-
a31e307c4000689576a04922e57a239955e6c201f813329eb1ce7b90475b1b51.exe windows x86
f433aa6fefc8cd38ffa433d95c037cef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
waveOutPause
ws2_32
ntohl
user32
SendDlgItemMessageA
gdi32
CreateCompatibleDC
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
advapi32
CryptAcquireContextA
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
Sections
.text Size: 2.0MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 410KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE