Static task
static1
Behavioral task
behavioral1
Sample
80800354cefca42242e9e68a4fe0f33e900720be84349be19a228c6dd9ac62a2.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
80800354cefca42242e9e68a4fe0f33e900720be84349be19a228c6dd9ac62a2.exe
Resource
win10v2004-20230703-en
General
-
Target
80800354cefca42242e9e68a4fe0f33e900720be84349be19a228c6dd9ac62a2
-
Size
1.5MB
-
MD5
9b4e91de0ab85158642164849da8d138
-
SHA1
c793f37a844cca55f5722a20ca3547177cc3af5c
-
SHA256
80800354cefca42242e9e68a4fe0f33e900720be84349be19a228c6dd9ac62a2
-
SHA512
807f7cf16dd2a626cda21acec4ec62a4de0912e8787d80f14127d2dfd60ed17a43245c92711cd9952a93158c24f20234d79f27286f750518429852d150a2e339
-
SSDEEP
24576:V2m9kD5J/Z9qJC55YAhcdjwusGr4aOZgoFk+XdWnSUm3iU/pLfjMAwd6cMFO9G:Ujh9KCnYAh8PEgXmFhjMAwdL8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80800354cefca42242e9e68a4fe0f33e900720be84349be19a228c6dd9ac62a2
Files
-
80800354cefca42242e9e68a4fe0f33e900720be84349be19a228c6dd9ac62a2.exe windows x86
8eba405930018aea677f60b794c5bfe3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
SetLastError
user32
IsZoomed
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CoGetClassObject
oleaut32
VariantTimeToSystemTime
comctl32
ord17
oledlg
ord8
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 524KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1016KB - Virtual size: 1016KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ