Static task
static1
Behavioral task
behavioral1
Sample
57a2b246e720ab3f9d298ded8fe6f8803df238961bf2f00f922b1569f116430c.exe
Resource
win7-20230712-en
General
-
Target
57a2b246e720ab3f9d298ded8fe6f8803df238961bf2f00f922b1569f116430c
-
Size
15.9MB
-
MD5
7d70cd6f0ef005781c70dc35c2b43a6e
-
SHA1
d19460e8b93ae199b1972863be23d9acb9a5b8e9
-
SHA256
57a2b246e720ab3f9d298ded8fe6f8803df238961bf2f00f922b1569f116430c
-
SHA512
64bc01aef9c22cb3da1990541a581328e30cac5100ecfc279fc37296d7739f3754913aba2d31f574091e1df37000d4fc5c74898596446421924a8e80a00fa895
-
SSDEEP
393216:yWsKNKstQOrm41vCkcs9aUZ6CSKvAqJvoAdN:yf+KQrmk7clUZ6CShqqA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57a2b246e720ab3f9d298ded8fe6f8803df238961bf2f00f922b1569f116430c
Files
-
57a2b246e720ab3f9d298ded8fe6f8803df238961bf2f00f922b1569f116430c.exe windows x86
665fd0eb8b9aa815b7360e8b246e63ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
recvfrom
version
VerLanguageNameA
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
rasapi32
RasGetConnectStatusA
kernel32
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ScrollWindowEx
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
gdi32
GetTextMetricsA
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
ole32
OleInitialize
oleaut32
LoadTypeLi
comctl32
ImageList_DragEnter
wininet
HttpSendRequestA
wtsapi32
WTSSendMessageW
Sections
.xilou Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xilou Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xilou Size: - Virtual size: 685KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xilou Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xilou Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xilou Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xilou Size: 9.9MB - Virtual size: 9.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE