Static task
static1
Behavioral task
behavioral1
Sample
47bd54c64d1115b34178210c5791898deb346dc2adb2d1f4e2626fc8dde09629.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
47bd54c64d1115b34178210c5791898deb346dc2adb2d1f4e2626fc8dde09629.exe
Resource
win10v2004-20230703-en
General
-
Target
47bd54c64d1115b34178210c5791898deb346dc2adb2d1f4e2626fc8dde09629
-
Size
2.5MB
-
MD5
d59b8f32c986ae068d1e2df1064e108a
-
SHA1
fd93c6b0d57a93da4f0157dc964156fa7139d935
-
SHA256
47bd54c64d1115b34178210c5791898deb346dc2adb2d1f4e2626fc8dde09629
-
SHA512
612e59bffee8c3e1952787a7a4e9414c242a7a2df6b4cb4b587e74302c01e137cf9a0e30fde78b5fc8bb062924abebb62c7bac0713343d4445d0446be5d021bb
-
SSDEEP
49152:M+uO70vfLT/KFEzOB0gYwJkpOPZPmKy3kbkYAIZ19RW7:570vDT/pzxa6AmKUkjZ19
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47bd54c64d1115b34178210c5791898deb346dc2adb2d1f4e2626fc8dde09629
Files
-
47bd54c64d1115b34178210c5791898deb346dc2adb2d1f4e2626fc8dde09629.exe windows x86
94b2e520c2ade2a80dbeb5e158cca15e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
ntdll
RtlAllocateHeap
user32
wsprintfA
ShowWindow
gdi32
GetStockObject
GetObjectW
msvcrt
memcpy
advapi32
RegOpenKeyExA
RegQueryValueExW
winmm
midiStreamRestart
winspool.drv
ClosePrinter
shell32
ShellExecuteA
ShellExecuteW
ole32
CoCreateInstance
oleaut32
VariantCopy
comctl32
ImageList_SetBkColor
ws2_32
WSACleanup
closesocket
comdlg32
GetFileTitleA
secur32
GetUserNameExA
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 16.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE