Static task
static1
Behavioral task
behavioral1
Sample
9d4f9c97e23f25f85dac72e94cb74d3f2fe0bf4db9c84d9ed14d60ac1c344972.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
9d4f9c97e23f25f85dac72e94cb74d3f2fe0bf4db9c84d9ed14d60ac1c344972.exe
Resource
win10v2004-20230703-en
General
-
Target
9d4f9c97e23f25f85dac72e94cb74d3f2fe0bf4db9c84d9ed14d60ac1c344972
-
Size
5.6MB
-
MD5
23b38082fe2d60b48b02935037964b0e
-
SHA1
65aad876b77b3e05e4ad2eaf9dc63f8687c605b7
-
SHA256
9d4f9c97e23f25f85dac72e94cb74d3f2fe0bf4db9c84d9ed14d60ac1c344972
-
SHA512
bd4989251ba9a3c9bd69b2a3a73a589329adfd46dae5eef91c662bfe5b50ec932a31b028d58d95011d67168b0b4a3db9fbc07a2bb209c751a84e57e4db8d9b9c
-
SSDEEP
98304:HF5qodmWyY8/hSkisxwhWo/VCOzBYVmdeVZTNaRps/f5pNPYPRthvdqhVt8Dou02:moIWynkV+eLGmdebTfdPEtPyVt8L0JSd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d4f9c97e23f25f85dac72e94cb74d3f2fe0bf4db9c84d9ed14d60ac1c344972
Files
-
9d4f9c97e23f25f85dac72e94cb74d3f2fe0bf4db9c84d9ed14d60ac1c344972.exe windows x86
43233999868da9b9f77ba426dc8ae2ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
GetFileSize
user32
ChildWindowFromPointEx
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ord17
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 4.4MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ