Static task
static1
Behavioral task
behavioral1
Sample
ff043b397a1c236aa8a8a6107e2a278722f7aa56c800761574301715f29fca5a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ff043b397a1c236aa8a8a6107e2a278722f7aa56c800761574301715f29fca5a.exe
Resource
win10v2004-20230915-en
General
-
Target
ff043b397a1c236aa8a8a6107e2a278722f7aa56c800761574301715f29fca5a
-
Size
13.7MB
-
MD5
4bca799b69a01a9e8a6919b41b0dffc0
-
SHA1
5565dcdffac8bfa0345d0b429b89edee110c4205
-
SHA256
ff043b397a1c236aa8a8a6107e2a278722f7aa56c800761574301715f29fca5a
-
SHA512
c43b3a52f81a363462bf023f45366bef497efacb65278fe1195724bd6c0b373e08e7a3de359994a29db719e4f94ac9be2d7b0e953698dc620c87b10bb72296eb
-
SSDEEP
196608:kwAxW7Exn0bbBsYo8JBIcvTZeNiRuCI6d/uk+gN3XUKwJ2ex5fl+Rj6egVI7hVgh:+Ki0550iZ3sJO5wDxlvsXe7zr9+Y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff043b397a1c236aa8a8a6107e2a278722f7aa56c800761574301715f29fca5a
Files
-
ff043b397a1c236aa8a8a6107e2a278722f7aa56c800761574301715f29fca5a.exe windows x86
432fc55f13f2f44d1365d832cb8bcac4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
select
user32
GetClipboardData
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
SHGetSpecialFolderPathA
ole32
CoGetClassObject
oleaut32
SafeArrayAccessData
comctl32
ImageList_Create
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
.text Size: 2.5MB - Virtual size: 8.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE