Static task
static1
Behavioral task
behavioral1
Sample
275a4e4d1e080f035381875c4362c35056be997da4547b2f41d1787043c0c1ce.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
275a4e4d1e080f035381875c4362c35056be997da4547b2f41d1787043c0c1ce.exe
Resource
win10v2004-20230915-en
General
-
Target
275a4e4d1e080f035381875c4362c35056be997da4547b2f41d1787043c0c1ce
-
Size
6.0MB
-
MD5
4fdda358addf8df0e0ba7db8cba351c7
-
SHA1
3a2ee03a91108b802e7bdbffbb4210bd037fcf8d
-
SHA256
275a4e4d1e080f035381875c4362c35056be997da4547b2f41d1787043c0c1ce
-
SHA512
980017a270de20d09d613d708072b23b60e9cd3903e81792069323322c142b593d1aaf2c15268d454d3d582de1afe7e79af79c615c2e1be34001e9decf8c53af
-
SSDEEP
98304:AHFZeB/wtKLBV+x3dgQa77o/DLlKGxTZyKT+uoHO28SZPbMW9Wk:I/TEvZ/77IHZNgI+uL3SZFz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 275a4e4d1e080f035381875c4362c35056be997da4547b2f41d1787043c0c1ce
Files
-
275a4e4d1e080f035381875c4362c35056be997da4547b2f41d1787043c0c1ce.exe windows:4 windows x86
a1ed4f13867db98acc9a928e918fe5e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
RaiseException
user32
SystemParametersInfoA
SystemParametersInfoA
gdi32
GetWindowOrgEx
ExcludeClipRect
winmm
midiStreamClose
midiOutUnprepareHeader
winspool.drv
DocumentPropertiesA
DocumentPropertiesA
advapi32
RegCreateKeyExA
RegOpenKeyExA
shell32
ShellExecuteA
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetDim
UnRegisterTypeLi
comctl32
ImageList_Destroy
ImageList_GetIcon
ws2_32
WSAAsyncSelect
inet_ntoa
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Tmd66 Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Tmd66 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ