Static task
static1
Behavioral task
behavioral1
Sample
0e8b7151823f349c6693294add42e5448c529ff4066a6aa4257a0d461492b786.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
0e8b7151823f349c6693294add42e5448c529ff4066a6aa4257a0d461492b786.exe
Resource
win10v2004-20230703-en
General
-
Target
0e8b7151823f349c6693294add42e5448c529ff4066a6aa4257a0d461492b786
-
Size
2.9MB
-
MD5
8dc514e154e1632dddfa652f2257c957
-
SHA1
93a125ab7afb357ff858b5bf49a583cbb0ced9c8
-
SHA256
0e8b7151823f349c6693294add42e5448c529ff4066a6aa4257a0d461492b786
-
SHA512
1a785494431741df17395d5369c8948a6151f2fd7f997c61c6b920804d4af71fd43bdd86bfaf87f03ff27d0de3e486e6c4a5891d1a15411889dbf4dd66aa7465
-
SSDEEP
49152:XEg5MAoqZYSNeG7lb4LKyk/J8eSxXBEMXQ1A9iICV7klYykmGOfDJ3NBuK1eXT:XQNqzN5FsKLJ9AxEMAGiIC34bJ3NdeXT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e8b7151823f349c6693294add42e5448c529ff4066a6aa4257a0d461492b786
Files
-
0e8b7151823f349c6693294add42e5448c529ff4066a6aa4257a0d461492b786.exe windows x86
662be1cf221e9f6683bb3caadc7ee3a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
user32
UnregisterClassA
gdi32
LineTo
winmm
waveOutUnprepareHeader
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Draw
ws2_32
WSAAsyncSelect
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.9MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1016KB - Virtual size: 1016KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ