Static task
static1
Behavioral task
behavioral1
Sample
a686f56ca348bfdd909e11f06f571b8da211887dd04e53cd14668b0eecff01bd.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a686f56ca348bfdd909e11f06f571b8da211887dd04e53cd14668b0eecff01bd.exe
Resource
win10v2004-20230703-en
General
-
Target
a686f56ca348bfdd909e11f06f571b8da211887dd04e53cd14668b0eecff01bd
-
Size
4.2MB
-
MD5
85e30a19ff5f07351fba95b63be31606
-
SHA1
b14d2a8e70d6952889948bd9ef3905c45d8bee18
-
SHA256
a686f56ca348bfdd909e11f06f571b8da211887dd04e53cd14668b0eecff01bd
-
SHA512
a49085eb78d7fce8dac34459321d1e85e72a1d8d0282d397494be9a5bf08454a12c07f602396d79463088ebf8e34ed9fd5b779a510f3f23186d4d1f4e29d9bc8
-
SSDEEP
98304:wNpDin+m/6JY9i1fGJLPL0dVui+62tUgrvssxFvbNMI:wi+qO46ULPYdVuiT2tUQssxBv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a686f56ca348bfdd909e11f06f571b8da211887dd04e53cd14668b0eecff01bd
Files
-
a686f56ca348bfdd909e11f06f571b8da211887dd04e53cd14668b0eecff01bd.exe windows x86
b74eef0392500860a4c7696a174b9a3a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
midiStreamOut
ws2_32
socket
rasapi32
RasGetConnectStatusA
kernel32
TerminateThread
user32
SetTimer
gdi32
RectVisible
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
StgCreateDocfileOnILockBytes
oleaut32
VariantChangeType
comctl32
ord17
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
GetFileTitleA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 2.2MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.m Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ