Static task
static1
Behavioral task
behavioral1
Sample
1aedc42f8f879662dfcf72e9e89e5c9e6a899200d02c43fe498a45468c942c26.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1aedc42f8f879662dfcf72e9e89e5c9e6a899200d02c43fe498a45468c942c26.exe
Resource
win10v2004-20230915-en
General
-
Target
1aedc42f8f879662dfcf72e9e89e5c9e6a899200d02c43fe498a45468c942c26
-
Size
1.8MB
-
MD5
7c4ba6d74f8bcc07e16c10839126a7f5
-
SHA1
8a2aa14f08093134865cf8ec7378df48352fe920
-
SHA256
1aedc42f8f879662dfcf72e9e89e5c9e6a899200d02c43fe498a45468c942c26
-
SHA512
36f7bc503c07e02aa7c02e3826b637d436830b51c62e313a9808e6e480701ffe010483359118d6c085abca9defdaf6d63d15378c13788b1ca3b021b4754b7d6a
-
SSDEEP
49152:QxHNbHrBfMGzsFsfAGDt1neQUwsrreIQsLFDhI3:IHNbLyGIK5Dt5D4rrpdFDhI3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1aedc42f8f879662dfcf72e9e89e5c9e6a899200d02c43fe498a45468c942c26
Files
-
1aedc42f8f879662dfcf72e9e89e5c9e6a899200d02c43fe498a45468c942c26.exe windows x86
0ac67aa85e96d48096cc5ef8cbbacf3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
CreateFileMappingA
user32
GetWindow
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 532KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YEARS Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.YEARS Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ