Static task
static1
Behavioral task
behavioral1
Sample
34db38db3e73ea21c4006d2961042441ec236159d97be432e515f64036048a66.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
34db38db3e73ea21c4006d2961042441ec236159d97be432e515f64036048a66.exe
Resource
win10v2004-20230703-en
General
-
Target
34db38db3e73ea21c4006d2961042441ec236159d97be432e515f64036048a66
-
Size
1.6MB
-
MD5
ad4f870387a360d95fc28a5e81c7a276
-
SHA1
ce71f2cefbb3c1ebb04d0b8667e40e9dc3d99d89
-
SHA256
34db38db3e73ea21c4006d2961042441ec236159d97be432e515f64036048a66
-
SHA512
9edf912631bf309316166555c9386d2dbd3b94d7b3caa7e3f03b7bb2144736776d65e585b723b2b7938f3b455a38fcc1c991774298310d7f386acffea919c8b4
-
SSDEEP
49152:2N4xpWvBPu5+MKlf44HYoJxT1kAPTqef6:2N4upuEMZboVTqef6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34db38db3e73ea21c4006d2961042441ec236159d97be432e515f64036048a66
Files
-
34db38db3e73ea21c4006d2961042441ec236159d97be432e515f64036048a66.exe windows x86
5ccda97c6eeacceef5d43d2ddbbd5c59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
midiStreamOut
ws2_32
ntohl
kernel32
InterlockedIncrement
user32
GetSysColorBrush
gdi32
GetStockObject
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegQueryValueA
shell32
DragAcceptFiles
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_EndDrag
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 508KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ