Static task
static1
Behavioral task
behavioral1
Sample
c4d898b5af572ce08b50ca42cc7ff408110cb11844f10645382ff2f87c0312e8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c4d898b5af572ce08b50ca42cc7ff408110cb11844f10645382ff2f87c0312e8.exe
Resource
win10v2004-20230915-en
General
-
Target
c4d898b5af572ce08b50ca42cc7ff408110cb11844f10645382ff2f87c0312e8
-
Size
702KB
-
MD5
f403134965c76ce44facf0a856f584e6
-
SHA1
98597db52a606519a662df46c7ef18c1ee4cd6a0
-
SHA256
c4d898b5af572ce08b50ca42cc7ff408110cb11844f10645382ff2f87c0312e8
-
SHA512
8b55bf3a1c1f56bd46a80148ff79814df7c5914caa03166b4b661f9be8bb14e0eb657023890fd738bd9d40ae277d201d14a99fdc47f52a8ea55d29c7c24c6093
-
SSDEEP
12288:UUww8/5hpH80FNBRzjcS2Tey8dMA6dwqUPnUTqvIt5yHWpQwlPzlCBt:mH8UHchey51EP6f5y22w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c4d898b5af572ce08b50ca42cc7ff408110cb11844f10645382ff2f87c0312e8
Files
-
c4d898b5af572ce08b50ca42cc7ff408110cb11844f10645382ff2f87c0312e8.exe windows x86
6404f3558e7e9e06da5612b73dc703f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
TabbedTextOutA
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
CryptDestroyHash
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ImageList_Destroy
ws2_32
ioctlsocket
comdlg32
ChooseColorA
Sections
.text Size: 676KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE