Static task
static1
Behavioral task
behavioral1
Sample
5a018b23798710574d9605959e8332f458ed7afc7e6d0e199aaf650a61980854.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5a018b23798710574d9605959e8332f458ed7afc7e6d0e199aaf650a61980854.exe
Resource
win10v2004-20230703-en
General
-
Target
5a018b23798710574d9605959e8332f458ed7afc7e6d0e199aaf650a61980854
-
Size
1.7MB
-
MD5
affd2d668d2585a66597e3e7651ea72a
-
SHA1
39ee087b40389c90b54b474b3832ada52c4fde33
-
SHA256
5a018b23798710574d9605959e8332f458ed7afc7e6d0e199aaf650a61980854
-
SHA512
176dbdd58220a5209c9f1811ab8f4cf0114ad3b8a4285bedc4d0802732b7fd9826e955840b515f4b537217b1e90866cf159ca0b044564d8980a9ab2bf0574bb1
-
SSDEEP
49152:02MYGtkcB26QcvJrZUI+DTS1urNizCUf49Q:i1tkcB2psJ2I+3S1urNiff49Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a018b23798710574d9605959e8332f458ed7afc7e6d0e199aaf650a61980854
Files
-
5a018b23798710574d9605959e8332f458ed7afc7e6d0e199aaf650a61980854.exe windows x86
5d21c5954f8f5dbb32d32963f42cea7b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
WSACleanup
kernel32
CreateSemaphoreA
user32
OpenClipboard
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
SafeArrayAccessData
comctl32
ImageList_Destroy
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 628KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ