Static task
static1
Behavioral task
behavioral1
Sample
3065e0bdcf13fe969e54422c3c124de4e0dc10c2e953a0324ce13e5ff3d73c3a.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
3065e0bdcf13fe969e54422c3c124de4e0dc10c2e953a0324ce13e5ff3d73c3a.exe
Resource
win10v2004-20230824-en
General
-
Target
3065e0bdcf13fe969e54422c3c124de4e0dc10c2e953a0324ce13e5ff3d73c3a
-
Size
2.7MB
-
MD5
724e6062cea6c613b34cda3711b0a334
-
SHA1
fa7e05b84279e690a7114fe7c6953a51f7b21811
-
SHA256
3065e0bdcf13fe969e54422c3c124de4e0dc10c2e953a0324ce13e5ff3d73c3a
-
SHA512
5f76daa6ef7f57ffa654d16899cdbeba233396e001ef1b2bfada0dbddc05011f38b95eaebfb98b6ba73271bbff06502a9be574f6182fdf84691e617d6d34ce6b
-
SSDEEP
49152:Zq9D8R6IvIa07XuTkeYjClwdw+4rQ5LrNArbAaAmRzICVibLvTwVSl8:i88zFleY+Sw9qNAfAaAmVvSTUSl8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3065e0bdcf13fe969e54422c3c124de4e0dc10c2e953a0324ce13e5ff3d73c3a
Files
-
3065e0bdcf13fe969e54422c3c124de4e0dc10c2e953a0324ce13e5ff3d73c3a.exe windows x86
52e6c4850a003bd184dcc1fc4cda501c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
iphlpapi
GetAdaptersInfo
winmm
midiStreamOut
ws2_32
closesocket
kernel32
ReleaseMutex
user32
GetSysColorBrush
gdi32
CreateSolidBrush
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
DragFinish
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayAccessData
comctl32
ord17
oledlg
ord8
wininet
FindFirstUrlCacheEntryA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 1.6MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ