Static task
static1
Behavioral task
behavioral1
Sample
f04c0ab704941657e07770a0cafba5e56e9634d4f3759e062875a2c7ec1ff6c2.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f04c0ab704941657e07770a0cafba5e56e9634d4f3759e062875a2c7ec1ff6c2.exe
Resource
win10v2004-20230703-en
General
-
Target
f04c0ab704941657e07770a0cafba5e56e9634d4f3759e062875a2c7ec1ff6c2
-
Size
2.1MB
-
MD5
6e490cb33d74657b6efbeb67a2d2fec4
-
SHA1
dd9cbf7a7d47ec38f6e5c2a9c3f226f1d2fe9f45
-
SHA256
f04c0ab704941657e07770a0cafba5e56e9634d4f3759e062875a2c7ec1ff6c2
-
SHA512
b5e63b0806ada36c71832c6d2d4dc4acdcdd927b0f850d918734fafe5c9d247e2bacd45e97b24b9dfc35dbf293cfe3207b149d790d2431b2be0029382a08d5f0
-
SSDEEP
49152:NBQXtMLyQqTXMQHPdLc9NGvu0D8ZvHeozj2okJgtE3b+a4rkxcUt4jjy1:QXtRQAJFLsOue8YozjHR04o4/W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f04c0ab704941657e07770a0cafba5e56e9634d4f3759e062875a2c7ec1ff6c2
Files
-
f04c0ab704941657e07770a0cafba5e56e9634d4f3759e062875a2c7ec1ff6c2.exe windows x86
316c48a12badebf3c2ac99759216f2be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
version
VerLanguageNameA
kernel32
GetWindowsDirectoryA
user32
IsIconic
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetImageCount
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.0MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ