Static task
static1
Behavioral task
behavioral1
Sample
81524bf4514e34018ebdf331b245b65c3ace7657cf46defc691c3c99f00d4b90.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
81524bf4514e34018ebdf331b245b65c3ace7657cf46defc691c3c99f00d4b90.exe
Resource
win10v2004-20230703-en
General
-
Target
81524bf4514e34018ebdf331b245b65c3ace7657cf46defc691c3c99f00d4b90
-
Size
1.8MB
-
MD5
08b21cd4259988fe974e7d2d00a2b6e2
-
SHA1
0d2ea5d4e531a337d1d42e5183f3312e9b48a1b0
-
SHA256
81524bf4514e34018ebdf331b245b65c3ace7657cf46defc691c3c99f00d4b90
-
SHA512
7df9671cdd9e76a085a2a44b8aff152f91d6098336f9de9b2d373bf692e86e44a20da4d79897e00196ef8e70f4dcd367a33ce9c0adcda1bc15178e310b241aaf
-
SSDEEP
49152:9YHj3SUWWKWp4h6XBTVNMmjukYWq9A1eibNPu:2D3SnTYxcZkxZ1eJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81524bf4514e34018ebdf331b245b65c3ace7657cf46defc691c3c99f00d4b90
Files
-
81524bf4514e34018ebdf331b245b65c3ace7657cf46defc691c3c99f00d4b90.exe windows x86
bf3843298af1b24a633fb9e3f92b4541
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
user32
OpenClipboard
gdi32
SetStretchBltMode
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
getpeername
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 392KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ