Static task
static1
Behavioral task
behavioral1
Sample
59613bb3985a9b60853d8df6d194dd9a26abe441b7ea8174dbfc8bffd6d85eaa.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
59613bb3985a9b60853d8df6d194dd9a26abe441b7ea8174dbfc8bffd6d85eaa.exe
Resource
win10v2004-20230824-en
General
-
Target
59613bb3985a9b60853d8df6d194dd9a26abe441b7ea8174dbfc8bffd6d85eaa
-
Size
4.4MB
-
MD5
7c5eaf86659eae7804376ab6da29dd42
-
SHA1
5a2143282ce601b13344954a6e5a7b244f960cf2
-
SHA256
59613bb3985a9b60853d8df6d194dd9a26abe441b7ea8174dbfc8bffd6d85eaa
-
SHA512
9049d9082f81f8d62e7fe08dd079321a0b3d849a9e8b72afa8469bafe1284fc624df904bb1f36a5fe0d30d9f3e3971c17eaf678760494bf92d369457a79bf14b
-
SSDEEP
98304:4RJDQOUK5VVs0tA+tJ/7fwMaTmmneLtAxccKnktoK3ExvfamAZldb5+u4pTSACH:4TDQOUKFsWA+tJ/MNCBjutoK3EgRld1/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59613bb3985a9b60853d8df6d194dd9a26abe441b7ea8174dbfc8bffd6d85eaa
Files
-
59613bb3985a9b60853d8df6d194dd9a26abe441b7ea8174dbfc8bffd6d85eaa.exe windows x86
b6834dc5168f6922aab7907ea426fd30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
iphlpapi
GetAdaptersInfo
winmm
waveOutUnprepareHeader
ws2_32
closesocket
kernel32
InterlockedIncrement
user32
PostThreadMessageA
gdi32
CreateRectRgn
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetOpenFileNameA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
ole32
CoRevokeClassObject
oleaut32
VariantInit
comctl32
ImageList_EndDrag
oledlg
ord8
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 2.9MB - Virtual size: 9.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ