Static task
static1
Behavioral task
behavioral1
Sample
3e6df5f8fb6a92b7f512e362a68ab2b0b701ea2e350b9e46218c437149e923df.exe
Resource
win7-20230712-en
General
-
Target
3e6df5f8fb6a92b7f512e362a68ab2b0b701ea2e350b9e46218c437149e923df
-
Size
1.4MB
-
MD5
c7d2c07e3a077cef5dcddd66e536f9ce
-
SHA1
e7dbdfe220dda8f51a7fbbe9d49248ed1931f586
-
SHA256
3e6df5f8fb6a92b7f512e362a68ab2b0b701ea2e350b9e46218c437149e923df
-
SHA512
c0a2125c0ce09326692fa2f766543f6fa2264700584d2184b240f2c5d983d544d42ad468ff10c66f01c7f30d8c48cfabf6736650657da35c5be3bf77178f8f15
-
SSDEEP
24576:FlfElCCvovK3lOSTQzlQ10nRK3fRqkFVdoOiUA4U3lpi7sMugcfH4TQY47MHjvY0:F5YCCvEUlOtlRqfAkFViO/Av3l47sM8Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e6df5f8fb6a92b7f512e362a68ab2b0b701ea2e350b9e46218c437149e923df
Files
-
3e6df5f8fb6a92b7f512e362a68ab2b0b701ea2e350b9e46218c437149e923df.exe windows x86
f1e441b9bde5ac576d3ac9d255c03f0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
WSACleanup
kernel32
CreateSemaphoreA
user32
GetClipboardData
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
VariantInit
comctl32
ImageList_Destroy
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 472KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 984KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ