Static task
static1
Behavioral task
behavioral1
Sample
79fa06f19a0dcfcd1db020fda658139cf9bbda284a5ae3f862a8f37e48876eb5.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
79fa06f19a0dcfcd1db020fda658139cf9bbda284a5ae3f862a8f37e48876eb5.exe
Resource
win10v2004-20230915-en
General
-
Target
79fa06f19a0dcfcd1db020fda658139cf9bbda284a5ae3f862a8f37e48876eb5
-
Size
13.2MB
-
MD5
d45f7e47407393125f0d53a00df50d7d
-
SHA1
88ebc1cbc13c67e2e67033a121b68d60b26ed445
-
SHA256
79fa06f19a0dcfcd1db020fda658139cf9bbda284a5ae3f862a8f37e48876eb5
-
SHA512
e08147f8b4bbf2823c6f48f8c23fedf0e8d08b7fb5501737c25154b904ffe2f4c2afbdce601378ed125602465c5c6c5105d5d01fd3254a0c8c3ac19d6570d106
-
SSDEEP
196608:wlyqj8WBpEwpg2p7N/Ygx/Ws7A7xjp+Bf/g02m7CNn1g0FSmvAevco:wyEWwFMgx/WOejp+1thEn1gI5u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79fa06f19a0dcfcd1db020fda658139cf9bbda284a5ae3f862a8f37e48876eb5
Files
-
79fa06f19a0dcfcd1db020fda658139cf9bbda284a5ae3f862a8f37e48876eb5.exe windows x86
8348e2f3bfc1b6532901e00d6786237a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
closesocket
kernel32
SetFilePointer
user32
ScreenToClient
gdi32
TextOutA
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 815KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 5.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 4.5MB - Virtual size: 4.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 664KB - Virtual size: 662KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 7.6MB - Virtual size: 7.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 424KB - Virtual size: 420KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE