Static task
static1
Behavioral task
behavioral1
Sample
ae6f834bddf6e296ebd04fd405d3320fe834a1baf52642621b55ef0f97a88581.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
ae6f834bddf6e296ebd04fd405d3320fe834a1baf52642621b55ef0f97a88581.exe
Resource
win10v2004-20230703-en
General
-
Target
ae6f834bddf6e296ebd04fd405d3320fe834a1baf52642621b55ef0f97a88581
-
Size
2.6MB
-
MD5
3e69cc20a62e06dbeb34e74b92aac92c
-
SHA1
70e018a7db6ba1ac476cb5d72288ac4a75174696
-
SHA256
ae6f834bddf6e296ebd04fd405d3320fe834a1baf52642621b55ef0f97a88581
-
SHA512
0b3103b0bad41d1102e3a1fb750c57b696213f393f119bd376ba6b6a89b5b2d40f5e6d481ae8ed6caf49aae2b791f156fbea5bb5b5ce39083acf4fd435ec59cc
-
SSDEEP
49152:uidE4h2TSApBRdskOxPbOho3rcocwl0mRPX93skAq0xkve5c:uidEm2T/2Wo3wSl0EPX9cPb0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae6f834bddf6e296ebd04fd405d3320fe834a1baf52642621b55ef0f97a88581
Files
-
ae6f834bddf6e296ebd04fd405d3320fe834a1baf52642621b55ef0f97a88581.exe windows x86
6a70829718b2422ce9f3e8a6882ee753
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
FindNextFileA
user32
wsprintfA
SystemParametersInfoA
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
gdi32
ScaleWindowExtEx
msimg32
GradientFill
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
wldap32
ord29
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.2MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ