Static task
static1
Behavioral task
behavioral1
Sample
805e52459c9b8e657c7c210a84151a40b7cc4771d5d95578baceadd7a3f58084.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
805e52459c9b8e657c7c210a84151a40b7cc4771d5d95578baceadd7a3f58084.exe
Resource
win10v2004-20230703-en
General
-
Target
805e52459c9b8e657c7c210a84151a40b7cc4771d5d95578baceadd7a3f58084
-
Size
12.5MB
-
MD5
12574da186094eeb4bcd5b3db128392b
-
SHA1
4db197381136a2941c5b97230fba09b559f59841
-
SHA256
805e52459c9b8e657c7c210a84151a40b7cc4771d5d95578baceadd7a3f58084
-
SHA512
0a779f18ab682e8fcf9f0fda2ceeb3c67a59037be64c3864dc3b8bd272a480cd86eb61f76ec767b6ec0e4bf3c4aa83b8f8ed23223fe9697ac2214be4cce1d0cd
-
SSDEEP
196608:nYcGHQrb6rswI85rNz8HK41Vb8H9fmn4aUe/Bz1l/I1eNWlmW7:xn/6YwICQT1I6Ht11I1JL7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 805e52459c9b8e657c7c210a84151a40b7cc4771d5d95578baceadd7a3f58084
Files
-
805e52459c9b8e657c7c210a84151a40b7cc4771d5d95578baceadd7a3f58084.exe windows x86
562d1306e4f556b98bee2a665dbfd83b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
kernel32
SetHandleCount
user32
GetDesktopWindow
gdi32
BeginPath
winmm
waveOutReset
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
OleRun
oleaut32
LoadTypeLi
comctl32
ImageList_Draw
ws2_32
recvfrom
wininet
InternetCanonicalizeUrlA
wldap32
ord29
Sections
.text Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 521KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 5.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 576KB - Virtual size: 573KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 400KB - Virtual size: 399KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE