Static task
static1
Behavioral task
behavioral1
Sample
183a02bc891b5f57858e4560fdcf50a9a0e89a5b726aaa6e7fdb29648605acc4.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
183a02bc891b5f57858e4560fdcf50a9a0e89a5b726aaa6e7fdb29648605acc4.exe
Resource
win10v2004-20230703-en
General
-
Target
183a02bc891b5f57858e4560fdcf50a9a0e89a5b726aaa6e7fdb29648605acc4
-
Size
6.6MB
-
MD5
9dba656c2b77202b4b9a0f21cad2b73b
-
SHA1
67199c1070d418703e9cb4c3c391ecce24bf2cd6
-
SHA256
183a02bc891b5f57858e4560fdcf50a9a0e89a5b726aaa6e7fdb29648605acc4
-
SHA512
5e9b94f566bcfbd72113ea190ee4b4912001697690fdb2bf485cecbc080777464f22fee11be16329d17d62ae5f6310982a2d4daf5515065685335da318da94c1
-
SSDEEP
98304:3hFDJ4eu5jAo1u3xz9h4StfKNJl5PBVxUhl9Kn66KCFU2tU2w9qV08JJiBsRLqls:3h9JPuMRZ4Cf0zvbn66xFdOqillwcnS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 183a02bc891b5f57858e4560fdcf50a9a0e89a5b726aaa6e7fdb29648605acc4
Files
-
183a02bc891b5f57858e4560fdcf50a9a0e89a5b726aaa6e7fdb29648605acc4.exe windows x86
7ee7955c3827321dab11775b97be7a3f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
LCMapStringW
setupapi
SetupDiDestroyDriverInfoList
user32
SetRect
gdi32
CreateCompatibleDC
msimg32
TransparentBlt
winspool.drv
ClosePrinter
advapi32
RegEnumKeyA
shell32
SHBrowseForFolderA
comctl32
InitCommonControlsEx
shlwapi
PathRemoveFileSpecA
uxtheme
GetThemePartSize
ole32
OleLockRunning
oleaut32
VarBstrFromDate
oledlg
ord8
gdiplus
GdipCreateFromHDC
oleacc
LresultFromObject
imm32
ImmReleaseContext
winmm
PlaySoundA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
ws2_32
WSASetLastError
wldap32
ord217
Sections
.text Size: 3.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ