Static task
static1
Behavioral task
behavioral1
Sample
7cb089eaf54312c6c983b4f1c65f686208c6d945c092779d30845656e96e74a0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
7cb089eaf54312c6c983b4f1c65f686208c6d945c092779d30845656e96e74a0.exe
Resource
win10v2004-20230915-en
General
-
Target
7cb089eaf54312c6c983b4f1c65f686208c6d945c092779d30845656e96e74a0
-
Size
10.3MB
-
MD5
af85e9c7125a9dbccdb19efd18b93328
-
SHA1
c1699331669aebb6e11aca3f6aeb164dab859d73
-
SHA256
7cb089eaf54312c6c983b4f1c65f686208c6d945c092779d30845656e96e74a0
-
SHA512
b0f467d8edf2eba36108ad890be433f4446991064e85b11cf6ed58e2fdcdbaf60bea70f453f2466ad6e6692506ec78b125e3bd384e86243f983189ce1e906c00
-
SSDEEP
196608:A2TWztr1dy7Wv2esWgLB/p8CPokp9AWkDEsjps+i9Rft:7TW5Ly7WvWLLBzwkE5jp8Rt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7cb089eaf54312c6c983b4f1c65f686208c6d945c092779d30845656e96e74a0
Files
-
7cb089eaf54312c6c983b4f1c65f686208c6d945c092779d30845656e96e74a0.exe windows x86
1b94efc426f78b5f57dfc8dcb929e876
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
TerminateThread
user32
GetDlgCtrlID
gdi32
LineTo
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
DragQueryFileA
ole32
CoGetClassObject
oleaut32
SysAllocStringLen
comctl32
ImageList_GetIcon
oledlg
ord8
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 4.8MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enrty Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enrty Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ