Static task
static1
Behavioral task
behavioral1
Sample
a66047777261380f4e562f5551a851af41c35ce23a9d22f4ef71189cf74e2293.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
a66047777261380f4e562f5551a851af41c35ce23a9d22f4ef71189cf74e2293.exe
Resource
win10v2004-20230703-en
General
-
Target
a66047777261380f4e562f5551a851af41c35ce23a9d22f4ef71189cf74e2293
-
Size
11.4MB
-
MD5
5f15a80156f55c117985778f52535283
-
SHA1
0263c6909ab4a7152d5d014877945c7ecb9d2b6a
-
SHA256
a66047777261380f4e562f5551a851af41c35ce23a9d22f4ef71189cf74e2293
-
SHA512
8e0b6c28c173d9d23e89e1acc501b9377f3189d38070596ef8642f990ce326beb200f5f3b4bbdee72c755f82049bc49a6fa8d37b25c2525991fd331e854ea354
-
SSDEEP
196608:9l5tvpSKdIq6ixlaq4xH5GCAaXOl72gMPoSd4JuujoFXyv+MQRDd3zDHOAz6bu:VvI4oq4vAaXyc/dMJIMQRDd3zDHwu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a66047777261380f4e562f5551a851af41c35ce23a9d22f4ef71189cf74e2293
Files
-
a66047777261380f4e562f5551a851af41c35ce23a9d22f4ef71189cf74e2293.exe windows x86
1674bdafd21d465bb12adb812c98986e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
user32
GetSysColorBrush
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoTaskMemFree
oleaut32
SysAllocStringLen
comctl32
ImageList_ReplaceIcon
oledlg
ord8
ws2_32
recv
Sections
.text Size: 3.7MB - Virtual size: 24.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE