Static task
static1
Behavioral task
behavioral1
Sample
aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7.exe
Resource
win10v2004-20230703-en
General
-
Target
aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7
-
Size
15.1MB
-
MD5
5b177601292034cf408d8abbf37e31d7
-
SHA1
234231228c7f91103a8c479c826396b34f0c5719
-
SHA256
aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7
-
SHA512
d30513a452e7d0111d3b171b1d7f19951faa3f2476042e0a39cafdffc4940f8a5c4ce34c322494b21b3161c6db2ebe99770794b6e15f8bf4aa9f4295d7591e03
-
SSDEEP
196608:I1hCTo8SP73F9gRFOvFWRUUARhxDOgUl8QcnkKpdqC7MRPOZAMe3hmT/KgVbCqdm:I1gT3SPbFaRFOvnUkWl8Bn57M7l0T7l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7
Files
-
aff2cff85f96711af9ade84136acf8650bcf30e55568c93b18fa9fcc618f11e7.exe windows x86
fa36d63a06ed5fb1a48cf056f976fbf1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetTimeZoneInformation
user32
PeekMessageA
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_Add
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 412KB - Virtual size: 411KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE