Static task
static1
Behavioral task
behavioral1
Sample
b81160c707c13bcb6d1209f992c38d443163d64333ff77a09e7a7647b5a60453.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
b81160c707c13bcb6d1209f992c38d443163d64333ff77a09e7a7647b5a60453.exe
Resource
win10v2004-20230703-en
General
-
Target
b81160c707c13bcb6d1209f992c38d443163d64333ff77a09e7a7647b5a60453
-
Size
9.2MB
-
MD5
65c6fd3740e8701b1c3ac30d46dc4dbb
-
SHA1
62b836792c566d774759ef3ce631081655eb7e4b
-
SHA256
b81160c707c13bcb6d1209f992c38d443163d64333ff77a09e7a7647b5a60453
-
SHA512
1461892db90c9450b96e8416072a5c3389d644718dfa5da8b10827a71ae8de5da84ca2e36ad816b8e2c92860a51773f2c60c1e5ac0c4871cd1952c54d9ebf408
-
SSDEEP
196608:ZNjj1lgtgbCwlV+ssEdLeIQuA3cxV+igItVjRhFC1YCOcjwrdpAxZW4:XgeVuEd/uaVLXtVjBCOrhpUc4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b81160c707c13bcb6d1209f992c38d443163d64333ff77a09e7a7647b5a60453
Files
-
b81160c707c13bcb6d1209f992c38d443163d64333ff77a09e7a7647b5a60453.exe windows x86
9de7376c6d0ba9620d1b085c7e1c4426
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiOutReset
ws2_32
shutdown
kernel32
GetTimeZoneInformation
user32
ScrollWindowEx
gdi32
RoundRect
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
ChooseColorA
advapi32
RegEnumValueA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
LHashValOfNameSys
comctl32
ord17
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 8.0MB - Virtual size: 11.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ