Static task
static1
Behavioral task
behavioral1
Sample
dbe733d2cec9ebfc3cc52974ac7c16e4bdd1ad2aa32d7813eb879a213a1e9722.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dbe733d2cec9ebfc3cc52974ac7c16e4bdd1ad2aa32d7813eb879a213a1e9722.exe
Resource
win10v2004-20230915-en
General
-
Target
dbe733d2cec9ebfc3cc52974ac7c16e4bdd1ad2aa32d7813eb879a213a1e9722
-
Size
14.0MB
-
MD5
2c3b6e91908b33f2db7bde7c0394c510
-
SHA1
cc33a53e6dbaa827f44b67dde73ef7d65886111c
-
SHA256
dbe733d2cec9ebfc3cc52974ac7c16e4bdd1ad2aa32d7813eb879a213a1e9722
-
SHA512
d0cb8cd476b189948e2d74681d6d38b8985d9b470569fd8b4d5313e9fb390109210feaced6397a2c026d1a578256694ac57e2df39331e199a6bb64119699abdc
-
SSDEEP
393216:qpxFjm+IVwrH+UljNLXzsUTeqsnwksoloinHn34uK+JnO4GDP:qpLZYSdBNbAU2V7lp4ursxP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dbe733d2cec9ebfc3cc52974ac7c16e4bdd1ad2aa32d7813eb879a213a1e9722
Files
-
dbe733d2cec9ebfc3cc52974ac7c16e4bdd1ad2aa32d7813eb879a213a1e9722.exe windows x86
8e282768965c5c0ba5e049dc489544ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
RtlUnwind
user32
ModifyMenuA
SetWindowPos
advapi32
RegOpenKeyExA
RegQueryValueExA
gdi32
SelectObject
LineTo
winspool.drv
DocumentPropertiesA
ClosePrinter
comctl32
ord17
ImageList_Add
shlwapi
PathFileExistsA
rasapi32
RasGetConnectStatusA
iphlpapi
GetAdaptersInfo
winmm
waveOutRestart
ws2_32
ntohl
shell32
DragFinish
ole32
OleUninitialize
oleaut32
UnRegisterTypeLi
wininet
InternetCloseHandle
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 554KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 412KB - Virtual size: 408KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE