Static task
static1
Behavioral task
behavioral1
Sample
2096a45d8e7a3ae1f33a6dc79b12a032e6d863638dbb2aa9f4f7ee215253acad.exe
Resource
win7-20230712-en
General
-
Target
2096a45d8e7a3ae1f33a6dc79b12a032e6d863638dbb2aa9f4f7ee215253acad
-
Size
11.4MB
-
MD5
ab4a684d48645769216ef37cf6e8d375
-
SHA1
222f1737140824b706fb8cebf7e2f6c6addec9d9
-
SHA256
2096a45d8e7a3ae1f33a6dc79b12a032e6d863638dbb2aa9f4f7ee215253acad
-
SHA512
3f6bcd3fa1d640fb8d949c087a7e073a2b1272fd60bc54efb01fe1313a1266d578c181351f07c17923a97e2a283543eb0004d7bee0e9029bfc9f29933909d8e5
-
SSDEEP
196608:t21DwahX1lVTLs9ZkZWMGACnkbvCnWxUuNfOdGUZe++U1oDbk/mfKcKarqwTrABu:t2lwahJEkEMGACnkbKFuNfOdM++tDYe5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2096a45d8e7a3ae1f33a6dc79b12a032e6d863638dbb2aa9f4f7ee215253acad
Files
-
2096a45d8e7a3ae1f33a6dc79b12a032e6d863638dbb2aa9f4f7ee215253acad.exe windows x86
f50e62083e8844ae150bdc6c9962617f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
midiStreamStop
ws2_32
gethostname
rasapi32
RasHangUpA
kernel32
GetCurrentProcess
user32
ScrollWindowEx
gdi32
CreateCompatibleDC
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
CryptCreateHash
shell32
ShellExecuteA
ole32
OleIsCurrentClipboard
oleaut32
SysAllocStringLen
comctl32
ImageList_Destroy
oledlg
ord8
wininet
InternetSetOptionA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 10.3MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ