Static task
static1
Behavioral task
behavioral1
Sample
b19b66dc5932255b43da4ce7e654d8e21616fd6f43b904e41ec977cd355db4f4.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b19b66dc5932255b43da4ce7e654d8e21616fd6f43b904e41ec977cd355db4f4.exe
Resource
win10v2004-20230703-en
General
-
Target
b19b66dc5932255b43da4ce7e654d8e21616fd6f43b904e41ec977cd355db4f4
-
Size
13.0MB
-
MD5
d2688956543fc44cad9ffb73d5707c46
-
SHA1
ef9fb5817ed0f9e058eb64c3d0af974764da6331
-
SHA256
b19b66dc5932255b43da4ce7e654d8e21616fd6f43b904e41ec977cd355db4f4
-
SHA512
b2ac4e803f6e897b80142a0a1b53f40cbfe91dc1d647b8e13cff8e842ea2f4c36aabeaa77419674ae6d4d5d08e54ca7a5e32f98dc0aaf1a78ed92441fc32005d
-
SSDEEP
393216:NYGEdBrD3ydn57MyQUAbz8LT4J8vRQtnc:N5EnrL+n5JQnblc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b19b66dc5932255b43da4ce7e654d8e21616fd6f43b904e41ec977cd355db4f4
Files
-
b19b66dc5932255b43da4ce7e654d8e21616fd6f43b904e41ec977cd355db4f4.exe windows x86
b4e075c4dfa2868a5554cf631f084bdd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
SetLastError
user32
SetMenu
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
DragFinish
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_Add
wininet
InternetCloseHandle
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 648KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 322KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 404KB - Virtual size: 402KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE