Static task
static1
Behavioral task
behavioral1
Sample
6715a1d8c5495b73b10acf07333785941865a30816df5bdb21a77d2f93aaac61.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6715a1d8c5495b73b10acf07333785941865a30816df5bdb21a77d2f93aaac61.exe
Resource
win10v2004-20230915-en
General
-
Target
6715a1d8c5495b73b10acf07333785941865a30816df5bdb21a77d2f93aaac61
-
Size
1.5MB
-
MD5
b6511dea088f1d991dd515fa79c1423e
-
SHA1
7228fd8c787025b34ad41f244ffb8fbc67cc05c7
-
SHA256
6715a1d8c5495b73b10acf07333785941865a30816df5bdb21a77d2f93aaac61
-
SHA512
1a16531b4ea87d61be4f9d8739308f54483e395606bc3e73f75fb8b8b3c00c9ff396896d5b5a91f91caa744beafab81f242a5b8a9247230918820f130d5e10e0
-
SSDEEP
24576:psodo6kJCQiCMZyJbmQw74R+EHQB6QNzyMtcrgpxGCweVqdkXBWfn0Qiv5+Ut1F+:psD5JDiBYmQw4RUmMtc6xGCweqMBWfnT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6715a1d8c5495b73b10acf07333785941865a30816df5bdb21a77d2f93aaac61
Files
-
6715a1d8c5495b73b10acf07333785941865a30816df5bdb21a77d2f93aaac61.exe windows x86
820fb67d290b198a2fbccb47b4f63edd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
lstrcpynA
user32
GetClipboardData
gdi32
SelectPalette
winmm
waveOutRestart
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
RegisterTypeLi
comctl32
ord17
ws2_32
WSAAsyncSelect
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 476KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ