Static task
static1
Behavioral task
behavioral1
Sample
725bf47a39172a97a63004bfdd767d5cf5c17f9d83d7eb0ddce45efa5b461c9d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
725bf47a39172a97a63004bfdd767d5cf5c17f9d83d7eb0ddce45efa5b461c9d.exe
Resource
win10v2004-20230824-en
General
-
Target
725bf47a39172a97a63004bfdd767d5cf5c17f9d83d7eb0ddce45efa5b461c9d
-
Size
14.5MB
-
MD5
28c233097b7406b394e82016ff19bd90
-
SHA1
a6c73b40d59cf4d0eb9f64ee9837989d87f504a1
-
SHA256
725bf47a39172a97a63004bfdd767d5cf5c17f9d83d7eb0ddce45efa5b461c9d
-
SHA512
6a5e103e3cdded82219c470512c3f045cc6ea13a556f1f4dcfdacee81d64781a9dc81d62c7a6f268992a6e751057f200f2d0f3c4073b7f79fb79b981edfd1977
-
SSDEEP
393216:5t00LG+1WVVpwzvN4n57MuDPwYOnQYPD9AG/:NWLaz14n5jDPPOX/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 725bf47a39172a97a63004bfdd767d5cf5c17f9d83d7eb0ddce45efa5b461c9d
Files
-
725bf47a39172a97a63004bfdd767d5cf5c17f9d83d7eb0ddce45efa5b461c9d.exe windows x86
91152dfe4acc463d7fd4dd510deaae08
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiOutPrepareHeader
ws2_32
select
kernel32
GetVersion
user32
wsprintfA
gdi32
ExtSelectClipRgn
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
DragQueryFileA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ord17
wininet
InternetCloseHandle
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 5.7MB - Virtual size: 5.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 13KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 420KB - Virtual size: 418KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE