Static task
static1
Behavioral task
behavioral1
Sample
050599a6880257eb4851433b61528c80c255e225d46ca21361558263462f4ed9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
050599a6880257eb4851433b61528c80c255e225d46ca21361558263462f4ed9.exe
Resource
win10v2004-20230703-en
General
-
Target
050599a6880257eb4851433b61528c80c255e225d46ca21361558263462f4ed9
-
Size
11.1MB
-
MD5
9ea810b557b5a7b3914a089b6986a36b
-
SHA1
037637397e3fdd792bdd6bbab83054f2c3e61e5c
-
SHA256
050599a6880257eb4851433b61528c80c255e225d46ca21361558263462f4ed9
-
SHA512
d99800cc7c7348ea801c378e392b04e9a4b39025d674142d94d9c44c35eb21f1e1c9ed5ecbed02f1af5cdd15133aa825137e336512e80065a751024b9f02ec02
-
SSDEEP
196608:Ii5tgYrYPjM6RJYWQjn7EFrK/okUWZVxK6t7Psfu2K6JlsRK87pKu:I2t1QRJ7Q3crsUMrK67aJSRX7I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 050599a6880257eb4851433b61528c80c255e225d46ca21361558263462f4ed9
Files
-
050599a6880257eb4851433b61528c80c255e225d46ca21361558263462f4ed9.exe windows x86
945a70059c12269405fc060a8e4cbcaa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
winmm
midiStreamClose
ws2_32
ntohl
user32
ScrollWindowEx
gdi32
PatBlt
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetImageCount
secur32
GetUserNameExA
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 9.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE