Static task
static1
Behavioral task
behavioral1
Sample
7b5290041dc4a920f46088ccf6da090ffc4e392c93af203a1e48acdf7def2a1b.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
7b5290041dc4a920f46088ccf6da090ffc4e392c93af203a1e48acdf7def2a1b.exe
Resource
win10v2004-20230703-en
General
-
Target
7b5290041dc4a920f46088ccf6da090ffc4e392c93af203a1e48acdf7def2a1b
-
Size
9.4MB
-
MD5
d487c25bffa0987db7f3b76c89c00909
-
SHA1
4f05cfad18d4b116ab8ad782c4cb0475d30e4def
-
SHA256
7b5290041dc4a920f46088ccf6da090ffc4e392c93af203a1e48acdf7def2a1b
-
SHA512
c498cea591e6b3bd7ee701764d0bf7deb206c3f8f6859d8e0580a208e0302260b6d94dae975e4328bb0a2f618fdab6d3ba9150c41930cc19527b0845c488a7a7
-
SSDEEP
196608:UiaI5aHptdJv0Fjh+FUr0zV2lOJvpq/apnAyWV6Ju2eAN:UiaI5gdJ4d7MVKEpz5AHVCcAN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b5290041dc4a920f46088ccf6da090ffc4e392c93af203a1e48acdf7def2a1b
Files
-
7b5290041dc4a920f46088ccf6da090ffc4e392c93af203a1e48acdf7def2a1b.exe windows x86
d036e2ae4054efd0d53039b53693869b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
GetWindowsDirectoryA
user32
GetKeyState
gdi32
LineTo
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
CoGetClassObject
oleaut32
SysAllocStringLen
comctl32
ImageList_GetIcon
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 6.4MB - Virtual size: 9.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ