Static task
static1
Behavioral task
behavioral1
Sample
835319557c80dc32ecdc4d7c5844417045b96e37171f05d02850e70e90b5a7b9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
835319557c80dc32ecdc4d7c5844417045b96e37171f05d02850e70e90b5a7b9.exe
Resource
win10v2004-20230703-en
General
-
Target
835319557c80dc32ecdc4d7c5844417045b96e37171f05d02850e70e90b5a7b9
-
Size
9.1MB
-
MD5
3314987f79a57e5894a18a860d7d988b
-
SHA1
0e7f51e993097d13387c3e7a9a705f1899c17a39
-
SHA256
835319557c80dc32ecdc4d7c5844417045b96e37171f05d02850e70e90b5a7b9
-
SHA512
1ce22890322f86eb7c985f5ad469426475d61ebd5ec59be853cd3413624e2cc741c897a707d6a4d8e2cf9f2e8d467a28c7e16ae578db8c652d50f2c71ac82532
-
SSDEEP
196608:96AWPTyNQke87M77qrxbvhbqVdG0cOTAuEkf8VnOBHKB:QzGNQkjMvqrxUOOTbf66
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 835319557c80dc32ecdc4d7c5844417045b96e37171f05d02850e70e90b5a7b9
Files
-
835319557c80dc32ecdc4d7c5844417045b96e37171f05d02850e70e90b5a7b9.exe windows x86
5fdb528a9be30f8c8a03916710124e48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetConnectStatusA
winmm
midiStreamProperty
ws2_32
send
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetDlgItem
CharUpperBuffW
gdi32
LineTo
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
SafeArrayGetElement
comctl32
ImageList_GetIcon
wininet
InternetOpenA
comdlg32
ChooseFontA
Sections
�������� Size: - Virtual size: 930KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�������� Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�������� Size: - Virtual size: 537KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�������� Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�������� Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�������� Size: 560KB - Virtual size: 558KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�������� Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ