Static task
static1
Behavioral task
behavioral1
Sample
f3698c43b9ecfd8db9f0e36258d05d5ded17a1831cdae3837bdb3afb15d30d79.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f3698c43b9ecfd8db9f0e36258d05d5ded17a1831cdae3837bdb3afb15d30d79.exe
Resource
win10v2004-20230703-en
General
-
Target
f3698c43b9ecfd8db9f0e36258d05d5ded17a1831cdae3837bdb3afb15d30d79
-
Size
8.5MB
-
MD5
379aea7a197af3549d91dcdd6a43cb67
-
SHA1
3b84aae541691de4314d026b85b25b1f3555518e
-
SHA256
f3698c43b9ecfd8db9f0e36258d05d5ded17a1831cdae3837bdb3afb15d30d79
-
SHA512
9b71ec23a92632581fee421220ffa819b6985902e28f28e3bf9e8676dbe88b703e97608fa52c79b2c4be7adba6aa487f0864c4b4793488527ff19c4afdcf0daa
-
SSDEEP
196608:Sjd4ErMIKAccls0Hc98FNASYY2qLjHR191:f0fUcls0OY2az
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f3698c43b9ecfd8db9f0e36258d05d5ded17a1831cdae3837bdb3afb15d30d79
Files
-
f3698c43b9ecfd8db9f0e36258d05d5ded17a1831cdae3837bdb3afb15d30d79.exe windows x86
a29d7048b6ff080b4d32b80fbd8b1df5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
SizeofResource
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
ShowWindow
gdi32
GetViewportExtEx
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
AllocateAndInitializeSid
shell32
ShellExecuteA
comctl32
InitCommonControlsEx
shlwapi
PathAppendA
oledlg
ord8
ole32
CoRevokeClassObject
oleaut32
VariantChangeType
gdiplus
GdiplusStartup
ws2_32
WSACleanup
wininet
InternetSetFilePointer
winmm
mciSendStringA
Sections
.text Size: - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data30 Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data31 Size: 8.4MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ