Static task
static1
Behavioral task
behavioral1
Sample
c67ee58198edea2a4d034000068b49ec244483026dc5c5ac3186b1120ff68e73.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c67ee58198edea2a4d034000068b49ec244483026dc5c5ac3186b1120ff68e73.exe
Resource
win10v2004-20230915-en
General
-
Target
c67ee58198edea2a4d034000068b49ec244483026dc5c5ac3186b1120ff68e73
-
Size
9.0MB
-
MD5
b048acaa066a94f0e9143b4f7155bd0c
-
SHA1
11d6df5eb431cf5eb8dd642f85d6f17be6a22cfb
-
SHA256
c67ee58198edea2a4d034000068b49ec244483026dc5c5ac3186b1120ff68e73
-
SHA512
cda2679bcf236fb93e652c0362f311130855cc2df62fa4754eaa58b6bbb565e3b12d0a7c5d9f0ba78325b6a011e31448c9cf43349194d0f8013c5a2dd749fc58
-
SSDEEP
196608:Q6xRZlMvBdsdaBybPDhnsri7Jg22EwQ7bnAEByQobm9sQPsf78c:QyRZSdGDdxtg227ktBroK9JPsfoc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c67ee58198edea2a4d034000068b49ec244483026dc5c5ac3186b1120ff68e73
Files
-
c67ee58198edea2a4d034000068b49ec244483026dc5c5ac3186b1120ff68e73.exe windows x86
e494d9b2e58e6f71ec64f4e65e7f67e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathFileExistsA
winmm
PlaySoundA
kernel32
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
DrawTextA
CharUpperBuffW
gdi32
DeleteObject
advapi32
RegOpenKeyExA
ole32
CoCreateInstance
iphlpapi
GetAdaptersInfo
oledlg
ord8
oleaut32
SafeArrayDestroy
winspool.drv
ClosePrinter
shell32
SHGetSpecialFolderPathA
comctl32
ord17
Sections
.text Size: - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 822KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.&=# Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xMp Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.L'* Size: 9.0MB - Virtual size: 9.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 756B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ