Static task
static1
Behavioral task
behavioral1
Sample
838361e6fe97644301d13f14c78e7f2a5c1f7cba9d1b48067f75a709618521ca.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
838361e6fe97644301d13f14c78e7f2a5c1f7cba9d1b48067f75a709618521ca.exe
Resource
win10v2004-20230703-en
General
-
Target
838361e6fe97644301d13f14c78e7f2a5c1f7cba9d1b48067f75a709618521ca
-
Size
5.4MB
-
MD5
38562e7026e3e1640b4ef9acfb7ce4bc
-
SHA1
c6eb5fbbbf7e05cedae9df1e1531e4a1831decce
-
SHA256
838361e6fe97644301d13f14c78e7f2a5c1f7cba9d1b48067f75a709618521ca
-
SHA512
1a1e50b08f88d83273f840d72eb5fed0e412d268a317bd17a6f6c04c5969578f6d46fbf1f300b670d4b2a8c20e297bab8f4713a616eb281fd38d2b6a7a63b384
-
SSDEEP
98304:GgXp75ik9kLeNvruwyCemS49aOh6+LWl2rh9pQtLOoW3Z5TrUGok6cT81a5nOC7:jZ7gk9nywcmS49ac6+LWclbwLy3PUGoQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 838361e6fe97644301d13f14c78e7f2a5c1f7cba9d1b48067f75a709618521ca
Files
-
838361e6fe97644301d13f14c78e7f2a5c1f7cba9d1b48067f75a709618521ca.exe windows x86
951ca5bb337519d1d078bf0454634f55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
midiStreamOut
ws2_32
send
kernel32
SetLastError
user32
GetSubMenu
gdi32
LineTo
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_Draw
comdlg32
ChooseFontA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 4.6MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ