Static task
static1
Behavioral task
behavioral1
Sample
a9f947a6465e1db0a54707745bb2dd5f9bff05baabbee24bcdbea5393e012f75.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a9f947a6465e1db0a54707745bb2dd5f9bff05baabbee24bcdbea5393e012f75.exe
Resource
win10v2004-20230703-en
General
-
Target
a9f947a6465e1db0a54707745bb2dd5f9bff05baabbee24bcdbea5393e012f75
-
Size
9.3MB
-
MD5
a4e40f7856ba8dd3a63d0a8741f081bf
-
SHA1
6df0e87568b2bb2b9c31e414c88f16cf947fbcd1
-
SHA256
a9f947a6465e1db0a54707745bb2dd5f9bff05baabbee24bcdbea5393e012f75
-
SHA512
8f0f5f854c0428940ba4685776f6159590e14c352af50453e2559bb4182a43f31b03321055ca7b769ad103ee35f9c54cc6f34703a6040274182555ecba150e6f
-
SSDEEP
196608:mcCOz8jh9idJSZdeQWSBKaFJuFeFeFeFeFeFeFeFeFeFeFeFeFeF:5z8IJgkbQb+0000000000000
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9f947a6465e1db0a54707745bb2dd5f9bff05baabbee24bcdbea5393e012f75
Files
-
a9f947a6465e1db0a54707745bb2dd5f9bff05baabbee24bcdbea5393e012f75.exe windows x86
bc278b945be01815d685d01c70360302
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
d3dx9_42
D3DXGetShaderConstantTableEx
dinput8
DirectInput8Create
xinput1_3
ord2
ws2_32
getsockopt
winmm
timeBeginPeriod
user32
GetQueueStatus
gdi32
GetStockObject
advapi32
RegOpenKeyExA
shell32
SHCreateDirectoryExA
ole32
CoInitializeEx
oleaut32
SafeArrayGetLBound
dbghelp
SymCleanup
d3d9
Direct3DCreate9
dsound
ord1
iphlpapi
GetAdaptersAddresses
Sections
.ALI213 Size: 4.3MB - Virtual size: 26.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ALI213 Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�Y|�uR Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE