Static task
static1
Behavioral task
behavioral1
Sample
98c83d4df1008f71a12d7a4979611fd7447c77dc26b4d58b604ff024f8fc087b.exe
Resource
win7-20230831-en
General
-
Target
98c83d4df1008f71a12d7a4979611fd7447c77dc26b4d58b604ff024f8fc087b
-
Size
6.6MB
-
MD5
469244189973527d7a38da2d5ffb718e
-
SHA1
6df98a0aa8c07fdfa3865746a06fd9e686003a48
-
SHA256
98c83d4df1008f71a12d7a4979611fd7447c77dc26b4d58b604ff024f8fc087b
-
SHA512
9a03b4539f10cafa2fab99d6551963d4003909566846950f3400c0aae08fd308128916c5e8757d70bf37fd77645fa787169e7d6f787ad362f72954de0fad470f
-
SSDEEP
98304:gcdPp/Cm7adYsbgP86HShMi3b753urMKKRhPH/J9evvYeh:r3Km7adYscHni3b0rMKAhv/LF0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98c83d4df1008f71a12d7a4979611fd7447c77dc26b4d58b604ff024f8fc087b
Files
-
98c83d4df1008f71a12d7a4979611fd7447c77dc26b4d58b604ff024f8fc087b.exe windows x86
aea7b79a09c70e543cab4060f9f9bb02
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
TlsFree
shlwapi
StrToIntExA
ws2_32
WSAStartup
inet_addr
version
GetFileVersionInfoA
user32
GetClassNameA
EnableWindow
advapi32
ControlService
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ole32
CLSIDFromString
psapi
GetModuleInformation
oleaut32
SafeArrayGetDim
LoadTypeLi
winmm
midiStreamRestart
rasapi32
RasGetConnectStatusA
gdi32
ExcludeClipRect
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
comctl32
ImageList_DrawIndirect
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
Sections
.text Size: 3.5MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ