Static task
static1
Behavioral task
behavioral1
Sample
1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe
Resource
win10v2004-20230703-en
General
-
Target
1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9
-
Size
3.4MB
-
MD5
a26e759f6aeea626a397e6ab02cd330f
-
SHA1
5dbd646f6ae1df6328c3a864f68e34f0817758d9
-
SHA256
1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9
-
SHA512
17eb279a40e242552f397b487dcc6fe0589b7a287077d6a446d2ad3ccdf7ec1d08e71ba31a8f3f0061baa5cd08def9bac0d8481b5b129b60504d79daf6a314a0
-
SSDEEP
98304:MILxRa60rqiM3yYjH7IukHHymEdyPXvQTph6V+nbAv:JR0roDIukHSyPvWAgne
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9
Files
-
1691ba6ec25a829afc770d5b4cd24788ea6ec3631a229d61c54f9355842e17c9.exe windows x86
08b20d866cc44864a22bb501fd278817
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetConnectStatusA
kernel32
RaiseException
user32
DrawFrameControl
gdi32
GetViewportExtEx
winmm
waveOutUnprepareHeader
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
VariantClear
comctl32
ImageList_Destroy
ws2_32
closesocket
wininet
InternetCanonicalizeUrlA
comdlg32
GetOpenFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.4MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 956KB - Virtual size: 956KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ