Static task
static1
Behavioral task
behavioral1
Sample
73192bc90ac665e006021b867da237c7e3edf4394df7240f7b7cc1b614cee4c9.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
73192bc90ac665e006021b867da237c7e3edf4394df7240f7b7cc1b614cee4c9.exe
Resource
win10v2004-20230915-en
General
-
Target
73192bc90ac665e006021b867da237c7e3edf4394df7240f7b7cc1b614cee4c9
-
Size
1.5MB
-
MD5
723d4d4232e8bec8e4b021ff8fff485a
-
SHA1
b0a75b54a05470c0c2f6ad1442d802998e5ca047
-
SHA256
73192bc90ac665e006021b867da237c7e3edf4394df7240f7b7cc1b614cee4c9
-
SHA512
ebd8fac134a00857af76b50ad1d195999aeb6885af57fafb0fee3942b311dead045cdc2a176d0bc5419bad2f0dc860da134ba1b1fbcbc9fe4d39b566b36975d8
-
SSDEEP
24576:ggkU4ICdKo9vAYKI6IXgtrxazZiDHC7L0NYjySzYZKHIbYBf+MRcfIY63VL6uVMb:gg0IChtIx0a0LAYpzYGJfCQVuqyOw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73192bc90ac665e006021b867da237c7e3edf4394df7240f7b7cc1b614cee4c9
Files
-
73192bc90ac665e006021b867da237c7e3edf4394df7240f7b7cc1b614cee4c9.exe windows x86
150d7e46666af5e5fa262549ea029a80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
SetEndOfFile
user32
OpenClipboard
gdi32
SelectPalette
winmm
waveOutUnprepareHeader
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantCopy
comctl32
ord17
ws2_32
recvfrom
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 456KB - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ