Static task
static1
Behavioral task
behavioral1
Sample
002824825513679ecacb79ad52ddb51ec25b4af843e226d20d68183adbea8e5a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
002824825513679ecacb79ad52ddb51ec25b4af843e226d20d68183adbea8e5a.exe
Resource
win10v2004-20230703-en
General
-
Target
002824825513679ecacb79ad52ddb51ec25b4af843e226d20d68183adbea8e5a
-
Size
9.6MB
-
MD5
d925291329d6a7c6b27e5f5d9420078c
-
SHA1
b3adbbf83e596edb8a71c95f47402ce93f1c945d
-
SHA256
002824825513679ecacb79ad52ddb51ec25b4af843e226d20d68183adbea8e5a
-
SHA512
380e6a9f29bb4cbeff1b4b0e53d1ae30839b8f12f7f32321895bcce1b9f9cc16677fbaad7803521a7fc4e34c3a34a252e4a10eac28f7a8591f153e4d98876fc4
-
SSDEEP
196608:/VysRK6hMtXr0MOovLXyH0GSEWydUvUDgUC2Zq2GEvrdPj:/VnRtMROqLiUbJr8M2ZqTEp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 002824825513679ecacb79ad52ddb51ec25b4af843e226d20d68183adbea8e5a
Files
-
002824825513679ecacb79ad52ddb51ec25b4af843e226d20d68183adbea8e5a.exe windows x86
383e7a8ff0f5efeba04360c4599e5d90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
LoadStringA
CharUpperBuffW
gdi32
LineTo
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Draw
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 1020KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DH] Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.`Kv Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.?1% Size: 9.5MB - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ