Static task
static1
Behavioral task
behavioral1
Sample
389fa05a75b6c42be4e0181221b6f9a97bba74870ccc0f65e7920125cd0cc5fe.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
389fa05a75b6c42be4e0181221b6f9a97bba74870ccc0f65e7920125cd0cc5fe.exe
Resource
win10v2004-20230915-en
General
-
Target
389fa05a75b6c42be4e0181221b6f9a97bba74870ccc0f65e7920125cd0cc5fe
-
Size
12.6MB
-
MD5
cb425a794d1c9b59fb18e0df515ad6c7
-
SHA1
297332f7dfc653c0d9df7f5467355a2294e1e427
-
SHA256
389fa05a75b6c42be4e0181221b6f9a97bba74870ccc0f65e7920125cd0cc5fe
-
SHA512
a69be9cbe1ad5561bcdaa86a0e2206f575632c22d9aa05fd7c5b0ef55522f8345135a018eafb94fb03b7e5bafc1ae18001dc01cc6e85211d610c4c039b8f67a8
-
SSDEEP
393216:VKRnDL921o/w/UI4+gaObdqlJ2ENk2Wy/:VKhDL9212w8I4VIlJ2Ez/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 389fa05a75b6c42be4e0181221b6f9a97bba74870ccc0f65e7920125cd0cc5fe
Files
-
389fa05a75b6c42be4e0181221b6f9a97bba74870ccc0f65e7920125cd0cc5fe.exe windows:4 windows x86
ac5253654702104558578f0bba0f975b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
user32
GetSysColorBrush
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
ClosePrinter
comdlg32
ChooseColorA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoTaskMemFree
oleaut32
SysAllocStringLen
comctl32
ImageList_ReplaceIcon
oledlg
ord8
ws2_32
recv
Sections
.text Size: 3.7MB - Virtual size: 24.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE