Static task
static1
Behavioral task
behavioral1
Sample
4c3b6fa7bc81a9582457c7f463c476e891ec4a17dd6ee2ab2d6dc7b59607452b.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4c3b6fa7bc81a9582457c7f463c476e891ec4a17dd6ee2ab2d6dc7b59607452b.exe
Resource
win10v2004-20230703-en
General
-
Target
4c3b6fa7bc81a9582457c7f463c476e891ec4a17dd6ee2ab2d6dc7b59607452b
-
Size
1.4MB
-
MD5
bfc125df73d4c65b254be66acef75a5b
-
SHA1
a8cef4746048994cb2176bcf8552d052078f2107
-
SHA256
4c3b6fa7bc81a9582457c7f463c476e891ec4a17dd6ee2ab2d6dc7b59607452b
-
SHA512
532e19dd55d3f4d4f6175d4bbc428e0ff98b18b8dfa08422d4b281396cb67d751f72c1157791d10f6e92bd6a4934116874808c10a218cbe0053b964c442e1f0c
-
SSDEEP
24576:VXLfUqab19v8FA9F6rttN+MbyeHVX/5Vv2RPs8jEU2rcad+Qb0JnNY:pLf+9v8aYZ+UyoCPNEUqcDQOS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c3b6fa7bc81a9582457c7f463c476e891ec4a17dd6ee2ab2d6dc7b59607452b
Files
-
4c3b6fa7bc81a9582457c7f463c476e891ec4a17dd6ee2ab2d6dc7b59607452b.exe windows x86
cd1a1429ef9e156355d77f6a1f95da4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
SetLastError
user32
GetMenu
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 468KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 976KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ