Static task
static1
Behavioral task
behavioral1
Sample
3633d7bf864ce143d9a41bbf787b6190f6cfe684eb98f7bbdb6a9bcd463e66b7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3633d7bf864ce143d9a41bbf787b6190f6cfe684eb98f7bbdb6a9bcd463e66b7.exe
Resource
win10v2004-20230915-en
General
-
Target
3633d7bf864ce143d9a41bbf787b6190f6cfe684eb98f7bbdb6a9bcd463e66b7
-
Size
4.5MB
-
MD5
8d17d5f695e55a9ca1f1be56a9ecf57a
-
SHA1
28b1d8bfc967d64710d65d0355eb3451c4715be1
-
SHA256
3633d7bf864ce143d9a41bbf787b6190f6cfe684eb98f7bbdb6a9bcd463e66b7
-
SHA512
e80c3d50976b7bffad95b19b24d29220626a40d3edfb36d0464defd288216ecd5b3c39caab9db9c517834e3fdbe6a370ed674e21f2f32a3999f306b36db46b56
-
SSDEEP
98304:KVSsbfBvZqvgAzpNA22Lij8ctd0bej1npPyhJ7iq8kMIZIhkVn9BVptAZ:K8sbfgvA22A8ctdce9yv7iqbM3SAZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3633d7bf864ce143d9a41bbf787b6190f6cfe684eb98f7bbdb6a9bcd463e66b7
Files
-
3633d7bf864ce143d9a41bbf787b6190f6cfe684eb98f7bbdb6a9bcd463e66b7.exe windows x86
b81a72495c46100ab524614e97f77769
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadWritePtr
user32
GetActiveWindow
gdi32
SetBrushOrgEx
winmm
waveOutWrite
winspool.drv
ClosePrinter
advapi32
RegOpenKeyExA
shell32
DragQueryFileA
ole32
CoTaskMemAlloc
oleaut32
GetErrorInfo
comctl32
ImageList_GetImageInfo
ws2_32
inet_ntoa
wldap32
ord29
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 3.4MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ