Static task
static1
Behavioral task
behavioral1
Sample
1d40507beb4059d3e91d02c3086762e7824b5bf2fce75f23a3a715d599908d58.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1d40507beb4059d3e91d02c3086762e7824b5bf2fce75f23a3a715d599908d58.exe
Resource
win10v2004-20230703-en
General
-
Target
1d40507beb4059d3e91d02c3086762e7824b5bf2fce75f23a3a715d599908d58
-
Size
12.4MB
-
MD5
4f0615622b8a05def945cf6a8ccc9f92
-
SHA1
1cc23afa0040e10799be9e80fe1c4d690afb8429
-
SHA256
1d40507beb4059d3e91d02c3086762e7824b5bf2fce75f23a3a715d599908d58
-
SHA512
8ce8e912258f0c89baf8734e4fa81755b787ca459bf8308b0baf125deac59fb2ed62bba63181254498c3ce0c51c2a4044f6a2c027c89c7587cea4b7a93e4ba3c
-
SSDEEP
196608:uoTal+18yaWfwfV0YK2KpdqC7MRPOZLtalQ2vTJuhjewk4buUWic+:uo16yaWfw90Dn57M6tsg24hWT+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d40507beb4059d3e91d02c3086762e7824b5bf2fce75f23a3a715d599908d58
Files
-
1d40507beb4059d3e91d02c3086762e7824b5bf2fce75f23a3a715d599908d58.exe windows x86
6a7ff8083bada9edaf5776ee100a1df5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiStreamStop
ws2_32
ntohl
kernel32
CreateMutexA
user32
GetSysColorBrush
gdi32
CreateFontIndirectA
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
ChooseColorA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantChangeType
comctl32
ImageList_AddMasked
Sections
.text Size: - Virtual size: 834KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 478KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 491KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 10KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 412KB - Virtual size: 408KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE