Static task
static1
Behavioral task
behavioral1
Sample
46eade681038ecb5e100e16707e457683c502e073c1ab8a79190ada9ed601a22.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
46eade681038ecb5e100e16707e457683c502e073c1ab8a79190ada9ed601a22.exe
Resource
win10v2004-20230915-en
General
-
Target
46eade681038ecb5e100e16707e457683c502e073c1ab8a79190ada9ed601a22
-
Size
11.5MB
-
MD5
c1c979a66a88e639ba08223448b29351
-
SHA1
04db03be9a5989c729ef0337d0807372ce9a8200
-
SHA256
46eade681038ecb5e100e16707e457683c502e073c1ab8a79190ada9ed601a22
-
SHA512
d32ecca9fcf6a276ab054eb89442f7941cabeff36050f382707463fcabb0675924ab38865b29575b2668272716bb558c12aa3e4d1ed3f1576ae2c9d670db5a01
-
SSDEEP
196608:nx8ZChvGB0EzVTQhmPEaSPzDkk9hAOwU2BrF6xU9hp7+wc9m6DUO/+x01HUj0UmR:igvGuiKUEaeDrhJLVOf79g1DUO/+xoUy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 46eade681038ecb5e100e16707e457683c502e073c1ab8a79190ada9ed601a22
Files
-
46eade681038ecb5e100e16707e457683c502e073c1ab8a79190ada9ed601a22.exe windows x86
432fc55f13f2f44d1365d832cb8bcac4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
select
user32
GetClipboardData
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
SHGetSpecialFolderPathA
ole32
CoGetClassObject
oleaut32
SafeArrayAccessData
comctl32
ImageList_Create
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
.text Size: 2.5MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE