Static task
static1
Behavioral task
behavioral1
Sample
0b703daf0b9cece4911ee42b57156a13ea1ac5f3ad35c4e10f86f34b0333dc36.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0b703daf0b9cece4911ee42b57156a13ea1ac5f3ad35c4e10f86f34b0333dc36.exe
Resource
win10v2004-20230703-en
General
-
Target
0b703daf0b9cece4911ee42b57156a13ea1ac5f3ad35c4e10f86f34b0333dc36
-
Size
5.7MB
-
MD5
5a843b462a0d2d45d06bd7bf46d9f910
-
SHA1
5d96b220887dd86153bd25a09212be12d2e9cdbd
-
SHA256
0b703daf0b9cece4911ee42b57156a13ea1ac5f3ad35c4e10f86f34b0333dc36
-
SHA512
e900b2443cff7bd1f8b8eab1a474b50c06a0f9b2d46ac011a93d3d181562a4241fa302e7675750686059f5d5cfb6c2460d803e87dc7f5e26afb3931eb7ce17b9
-
SSDEEP
98304:1DIB93WXRQZHL6/4yVlbYzsZE30Z4f0NT17/1g/rNFK9u2P3FZyyo:E3YyZr03lbYA+fs7/+Diu0i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b703daf0b9cece4911ee42b57156a13ea1ac5f3ad35c4e10f86f34b0333dc36
Files
-
0b703daf0b9cece4911ee42b57156a13ea1ac5f3ad35c4e10f86f34b0333dc36.exe windows x86
01237c6c4b7cca2b690b561671e1aedf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
GetStdHandle
user32
GetDesktopWindow
gdi32
SetROP2
winmm
midiStreamRestart
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetUBound
comctl32
_TrackMouseEvent
ws2_32
WSACleanup
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 4.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ