Static task
static1
Behavioral task
behavioral1
Sample
a8453518ef886d8664919a48f3d78784e373f4c43feed093f32b8b6fbadc6098.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a8453518ef886d8664919a48f3d78784e373f4c43feed093f32b8b6fbadc6098.exe
Resource
win10v2004-20230703-en
General
-
Target
a8453518ef886d8664919a48f3d78784e373f4c43feed093f32b8b6fbadc6098
-
Size
14.7MB
-
MD5
dc2246556c4803e6fcb163563d3342ea
-
SHA1
11cbd9f29cc4cdabc7902c87f774de3aa98e223c
-
SHA256
a8453518ef886d8664919a48f3d78784e373f4c43feed093f32b8b6fbadc6098
-
SHA512
b35ced5e9618c7617ffb63a596adde141cd29fc56733fa0d4cc1df741d06f4f0379c2d270df7e4a4c9e7e2ea3f08aeab82e23e73b4aa0774b63b6465cac8fa11
-
SSDEEP
196608:LMaqB82sT1eAqpeJ3L7QBzyrNkWoqpECGBon6sMwxwO91/1LHpxvH85aeVRy+6+C:LMaq21Qog+rgdB4htk5aERy+61646R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8453518ef886d8664919a48f3d78784e373f4c43feed093f32b8b6fbadc6098
Files
-
a8453518ef886d8664919a48f3d78784e373f4c43feed093f32b8b6fbadc6098.exe windows x86
69d84f3fffe849dd533418a85dce06b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStringToAddressW
kernel32
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
GetSystemMetrics
advapi32
CryptCreateHash
ole32
OleLockRunning
shlwapi
StrCmpW
gdiplus
GdipFree
winmm
PlaySoundW
bcrypt
BCryptDestroyHash
winhttp
WinHttpSetCredentials
crypt32
CertFreeCertificateChain
gdi32
GetDeviceCaps
shell32
DragQueryFileW
oleaut32
SysAllocString
comctl32
InitCommonControlsEx
imm32
ImmGetContext
Sections
.text Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Lit Size: - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.=g% Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nJn Size: 14.6MB - Virtual size: 14.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ