Static task
static1
Behavioral task
behavioral1
Sample
2e599297133374a3308208fa86a04bd068caacae3a27b023305850f743ebae13.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2e599297133374a3308208fa86a04bd068caacae3a27b023305850f743ebae13.exe
Resource
win10v2004-20230915-en
General
-
Target
2e599297133374a3308208fa86a04bd068caacae3a27b023305850f743ebae13
-
Size
3.1MB
-
MD5
a64a2ec1ef6530d7d65e1cd65ac49d14
-
SHA1
afc20f208b70fc596099104918c1c764801ce30f
-
SHA256
2e599297133374a3308208fa86a04bd068caacae3a27b023305850f743ebae13
-
SHA512
ba1a62eac2d8b7400a48923ea298bcc4bf8f48df90dd5a26161bf91d11e4f6cbf16e1dc0f3cbb054729330a8c403bc6a33b59f74a7baf71c66c792741212b9ca
-
SSDEEP
98304:6zydDcTIBkenoXEQyF5GPlyvZ7XB8O3wt0:9EIXoXxq5jvZt8O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2e599297133374a3308208fa86a04bd068caacae3a27b023305850f743ebae13
Files
-
2e599297133374a3308208fa86a04bd068caacae3a27b023305850f743ebae13.exe windows x86
60f2936a5306234af75bb05f71ea95ed
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
rasapi32
RasDialA
winmm
midiStreamRestart
ws2_32
WSAAsyncSelect
user32
CloseClipboard
gdi32
RectVisible
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
SafeArrayAccessData
comctl32
ImageList_Destroy
wldap32
ord29
wininet
InternetCloseHandle
comdlg32
ChooseFontA
secur32
GetUserNameExA
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE