Static task
static1
Behavioral task
behavioral1
Sample
94d6094ecc058dc29ba443b85d665c319263cd3c27f5b299c31ea8d0d11b0d68.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
94d6094ecc058dc29ba443b85d665c319263cd3c27f5b299c31ea8d0d11b0d68.exe
Resource
win10v2004-20230703-en
General
-
Target
94d6094ecc058dc29ba443b85d665c319263cd3c27f5b299c31ea8d0d11b0d68
-
Size
13.9MB
-
MD5
52f20126cecbd70c986713febec3c7f7
-
SHA1
c1eaf17e6e0e9d02144d62ceaad1813d7bc827c7
-
SHA256
94d6094ecc058dc29ba443b85d665c319263cd3c27f5b299c31ea8d0d11b0d68
-
SHA512
1c97493c6fe0733152e16392be12665326a2530489bb0f84e271a8406a542bb7d932d0a0191e4b3ff4267d1af6496a74a0fe876aff1519155d3230785147ef62
-
SSDEEP
393216:2VKp8wkU0qgwHTK0CKucdS7sSAZx74BJb:6jq1HOa7x74B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94d6094ecc058dc29ba443b85d665c319263cd3c27f5b299c31ea8d0d11b0d68
Files
-
94d6094ecc058dc29ba443b85d665c319263cd3c27f5b299c31ea8d0d11b0d68.exe windows x86
1a0aa2ddc09ff7b2d425012d15cb041d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
winmm
waveOutOpen
ws2_32
WSACleanup
version
VerQueryValueA
user32
GetDC
gdi32
Pie
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
DragFinish
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
ChooseFontA
Sections
.MPRESS1 Size: 13.8MB - Virtual size: 35.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE