Static task
static1
Behavioral task
behavioral1
Sample
9c55819f7e2cf4eccbb7c20e8f84a446d75e245fe6528c8e32e3b38ee1009c30.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9c55819f7e2cf4eccbb7c20e8f84a446d75e245fe6528c8e32e3b38ee1009c30.exe
Resource
win10v2004-20230703-en
General
-
Target
9c55819f7e2cf4eccbb7c20e8f84a446d75e245fe6528c8e32e3b38ee1009c30
-
Size
1.5MB
-
MD5
54ca963b25929070c4356dae29cbdb44
-
SHA1
ce310a006fd4ac14898e49da00293d03602e0264
-
SHA256
9c55819f7e2cf4eccbb7c20e8f84a446d75e245fe6528c8e32e3b38ee1009c30
-
SHA512
f6d5440ecc63a7edf9d55a519f181f7adcb19c8b7731d7f19b8b780c3a28dff88e18e2d9ecfacf6ae2bf289b9276c0fd34905ab8af584a5b8eb999fc460201eb
-
SSDEEP
24576:krbZhVt/FSsgnXRpJUM8ZK6P2F6fjRHJGTjHdI8kcphm8hvw57xfI3rC9Exhy:krbZh7tqeREFitJGT5tZFwxQ3Dhy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9c55819f7e2cf4eccbb7c20e8f84a446d75e245fe6528c8e32e3b38ee1009c30
Files
-
9c55819f7e2cf4eccbb7c20e8f84a446d75e245fe6528c8e32e3b38ee1009c30.exe windows x86
8782ae3fbf860b8b73220c1f26458f9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DuplicateHandle
user32
MessageBoxA
gdi32
RealizePalette
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
CoGetClassObject
oleaut32
VariantCopy
comctl32
ord17
oledlg
ord8
ws2_32
WSACleanup
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 484KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ