Static task
static1
Behavioral task
behavioral1
Sample
a52817792f81cca2ad24b7137d3efec8fa7b93430d2f8204b03e9066e972fc82.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a52817792f81cca2ad24b7137d3efec8fa7b93430d2f8204b03e9066e972fc82.exe
Resource
win10v2004-20230703-en
General
-
Target
a52817792f81cca2ad24b7137d3efec8fa7b93430d2f8204b03e9066e972fc82
-
Size
10.7MB
-
MD5
a7e5dedd1271c8d7591e1018bc404205
-
SHA1
59b8fe9e115698ddaef2063b510199b690d15e0e
-
SHA256
a52817792f81cca2ad24b7137d3efec8fa7b93430d2f8204b03e9066e972fc82
-
SHA512
52db519d1f983e86d3d2f20cfb6803c9f63e11f2377d9190fc5f80912920a8cf7d004471ba4d08ed8b5f9363d4bd9348f3c3de4cc373499395f7cec06c9ec1d3
-
SSDEEP
196608:q0dumSf3Iaem9wnXygWGBhhgQQlNL9rV6nbwPa8F2Rdo9nARaHgXU/SfKwkP:chbem9pgt0FTUwSOUqwaA+SfKw6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a52817792f81cca2ad24b7137d3efec8fa7b93430d2f8204b03e9066e972fc82
Files
-
a52817792f81cca2ad24b7137d3efec8fa7b93430d2f8204b03e9066e972fc82.exe windows x86
29264dc7f280213ceff9dfa9ab6ee25a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
user32
GetSysColorBrush
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoTaskMemFree
oleaut32
VariantCopy
comctl32
ImageList_ReplaceIcon
oledlg
ord8
ws2_32
recv
Sections
.text Size: 4.2MB - Virtual size: 25.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE