Static task
static1
Behavioral task
behavioral1
Sample
536e432ee5d4f1b03db9199f5a5294e0fbac27d245ca5295ab6e0273fcf8bfad.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
536e432ee5d4f1b03db9199f5a5294e0fbac27d245ca5295ab6e0273fcf8bfad.exe
Resource
win10v2004-20230915-en
General
-
Target
536e432ee5d4f1b03db9199f5a5294e0fbac27d245ca5295ab6e0273fcf8bfad
-
Size
2.3MB
-
MD5
06974a45eb8cbf41eca167b8b9e249b7
-
SHA1
dd9bf049224a5482df4e11dc94329f98857c7979
-
SHA256
536e432ee5d4f1b03db9199f5a5294e0fbac27d245ca5295ab6e0273fcf8bfad
-
SHA512
aa2f48ddb3622ef36b80d2e64ffe2f832d84a2049da68f439edb1d5d89bb20046b16bac64246ac426ba901dee5525a0b664e5e90f97454f3eb64640d89ec8526
-
SSDEEP
49152:QvMO9IP3R9Pd4ZJrqfzXUQxN3D5xnpDX+86J:Y9wvPd4vrqfVxNXpj+PJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 536e432ee5d4f1b03db9199f5a5294e0fbac27d245ca5295ab6e0273fcf8bfad
Files
-
536e432ee5d4f1b03db9199f5a5294e0fbac27d245ca5295ab6e0273fcf8bfad.exe windows x86
0e8a668bdc32a522ef1160989b3e99ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
user32
SetTimer
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
.text Size: 1.8MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE