Static task
static1
Behavioral task
behavioral1
Sample
c5c74c275c648eba1f5c8960e39a94ddb2eaa41a0311df294e80134f21de879a.exe
Resource
win7-20230824-en
Behavioral task
behavioral2
Sample
c5c74c275c648eba1f5c8960e39a94ddb2eaa41a0311df294e80134f21de879a.exe
Resource
win10v2004-20230703-en
General
-
Target
c5c74c275c648eba1f5c8960e39a94ddb2eaa41a0311df294e80134f21de879a
-
Size
2.0MB
-
MD5
74b8af72c43d4d214e4c0055b60c6638
-
SHA1
eedad318f70a07b4f5c6e021a4923e6a74b06c25
-
SHA256
c5c74c275c648eba1f5c8960e39a94ddb2eaa41a0311df294e80134f21de879a
-
SHA512
01af42ac234d3bddd94c7011a7443e9dff60dc1a8aa4789300c7c1a33604c47ae259e9fcb149171d2d40759d4038abbe90fd35637d8141a7de853367582588a8
-
SSDEEP
49152:3yWPY4qtRV+O2tyyo2oONPv7D6fl20DORP7ZtXbn:3yKY482tKmt7D6I0yPlNbn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5c74c275c648eba1f5c8960e39a94ddb2eaa41a0311df294e80134f21de879a
Files
-
c5c74c275c648eba1f5c8960e39a94ddb2eaa41a0311df294e80134f21de879a.exe windows x86
0fbed001e30e52d518c76e15257cd1e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiOutPrepareHeader
ws2_32
select
kernel32
EnumResourceNamesA
user32
WaitForInputIdle
gdi32
ExtSelectClipRgn
winspool.drv
ClosePrinter
advapi32
OpenProcessToken
shell32
DragQueryFileA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 508KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ