Static task
static1
Behavioral task
behavioral1
Sample
fe56ff3a326f50c79bdc9c5e98b8b196c6769a7a691e64297af29d7bd173c2f9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fe56ff3a326f50c79bdc9c5e98b8b196c6769a7a691e64297af29d7bd173c2f9.exe
Resource
win10v2004-20230915-en
General
-
Target
fe56ff3a326f50c79bdc9c5e98b8b196c6769a7a691e64297af29d7bd173c2f9
-
Size
11.4MB
-
MD5
2ec80540c3e818751db6f8fb9b2e4469
-
SHA1
61d5ce19fa675ae76eebc183faa1e1d1db2d78e4
-
SHA256
fe56ff3a326f50c79bdc9c5e98b8b196c6769a7a691e64297af29d7bd173c2f9
-
SHA512
85ef6c622a0c0dd74f4689609e15608b7731de277d62bbb7b0966506ea6d9258aab0a0a11bc5bafc6eca1060468e61e91b54b74a9b07e48561370634ec9a0c0f
-
SSDEEP
196608:WRRNQ2ADtYLyb6+BKn8HdaErzhwyk/QB2wF04Hd3EHisTM5DTGCXKBISpDf:WSx6oKn8HAEr1j0QcwFHUlMndaBZp7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe56ff3a326f50c79bdc9c5e98b8b196c6769a7a691e64297af29d7bd173c2f9
Files
-
fe56ff3a326f50c79bdc9c5e98b8b196c6769a7a691e64297af29d7bd173c2f9.exe windows x86
5ae739cc0e8fa11309af69cf6dd58b1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutPause
ws2_32
WSACleanup
kernel32
SetLastError
user32
GetMenuCheckMarkDimensions
gdi32
CreateDCA
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
CryptGetHashParam
shell32
SHEmptyRecycleBinA
ole32
CoRevokeClassObject
oleaut32
VariantChangeType
comctl32
ImageList_Destroy
oledlg
ord8
wininet
FindNextUrlCacheEntryA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 10.4MB - Virtual size: 10.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ