Static task
static1
Behavioral task
behavioral1
Sample
91160fa81306b4d42620a0085e64cae0a4ad43f69505cf5f3af050c38fd41327.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
91160fa81306b4d42620a0085e64cae0a4ad43f69505cf5f3af050c38fd41327.exe
Resource
win10v2004-20230703-en
General
-
Target
91160fa81306b4d42620a0085e64cae0a4ad43f69505cf5f3af050c38fd41327
-
Size
12.7MB
-
MD5
3d722636f536246d09eb0c496b06c62f
-
SHA1
6ad542a105b571c1ca85b696ffee79130bb450eb
-
SHA256
91160fa81306b4d42620a0085e64cae0a4ad43f69505cf5f3af050c38fd41327
-
SHA512
bba0478ebf181d6c24234ea21f1098c1ca33452bb5010fd20328483a420aa3275eab10372d8f9e85573a03e420b27cf7cb35f796b14fd67c7e86ab9f44498f20
-
SSDEEP
393216:CBI6XaR5aci4yKkND5NES+Mu7naFvF5mTZtYyL3t:T6Xs3yKkND5NHnu7nKTmTM+3t
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91160fa81306b4d42620a0085e64cae0a4ad43f69505cf5f3af050c38fd41327
Files
-
91160fa81306b4d42620a0085e64cae0a4ad43f69505cf5f3af050c38fd41327.exe windows x86
7478180d65859bca974c5545e541de59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetTimeZoneInformation
user32
IsZoomed
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
DragQueryFileA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_Add
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 11.7MB - Virtual size: 11.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 984KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ