Static task
static1
Behavioral task
behavioral1
Sample
fa6d0f9d257b4ed4d10c9c4aaa0b81584ce9281cea5f609989a26977c123c40c.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
fa6d0f9d257b4ed4d10c9c4aaa0b81584ce9281cea5f609989a26977c123c40c.exe
Resource
win10v2004-20230703-en
General
-
Target
fa6d0f9d257b4ed4d10c9c4aaa0b81584ce9281cea5f609989a26977c123c40c
-
Size
1.9MB
-
MD5
a4e50cf0ab26f0a8c65eb625c0be064b
-
SHA1
11f5af5cb17dafa0c5946c38cc7de4c161a25895
-
SHA256
fa6d0f9d257b4ed4d10c9c4aaa0b81584ce9281cea5f609989a26977c123c40c
-
SHA512
2c991fd335ed50e0409a967e7b7ed13cee67ff668d4b8db28280e9a3136377da910248be7248f47d74af036ef2f741d53dee8429668d480eaf687a16d2d56ffa
-
SSDEEP
24576:hozanNRg9rdjWnxefTFuKiXqxhDXSilzLCQqTQRk25cq10J854byWfQzbDj67AlU:CzB1ZxCidLUTQRkrq10mei20bAn2e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa6d0f9d257b4ed4d10c9c4aaa0b81584ce9281cea5f609989a26977c123c40c
Files
-
fa6d0f9d257b4ed4d10c9c4aaa0b81584ce9281cea5f609989a26977c123c40c.exe windows x86
6290d33e72c748c726380b7a7acfba97
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
user32
UnhookWindowsHookEx
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
gdi32
CreateFontA
shlwapi
PathFileExistsA
ws2_32
recv
psapi
GetProcessImageFileNameA
comctl32
ImageList_Add
winspool.drv
OpenPrinterA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
Sections
.text Size: 724KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ