Static task
static1
Behavioral task
behavioral1
Sample
79432025b8ea18da6c92dda02c8d7cd08b2815e3a2a21decef17ba5e1be28bbc.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
79432025b8ea18da6c92dda02c8d7cd08b2815e3a2a21decef17ba5e1be28bbc.exe
Resource
win10v2004-20230915-en
General
-
Target
79432025b8ea18da6c92dda02c8d7cd08b2815e3a2a21decef17ba5e1be28bbc
-
Size
3.4MB
-
MD5
10465d0f0e7f4adfed0582dc9d3034cd
-
SHA1
a09363786002a72048eb2dae0e6e6f7f8b45b542
-
SHA256
79432025b8ea18da6c92dda02c8d7cd08b2815e3a2a21decef17ba5e1be28bbc
-
SHA512
8b2de243f01259fc817579a35ab7b9ba11f1226c44074e20fb3ee4df2b5f40ac2ebc97f8db867b0088e642ba4c89adec0ee2816e35af0d0f5a9194bc0d799830
-
SSDEEP
98304:6SBn1aFVQ0ItRHX9/uO6Edwouo0a9PRI7h1FJK:31t0ahX9/uO6CwU0a95uK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79432025b8ea18da6c92dda02c8d7cd08b2815e3a2a21decef17ba5e1be28bbc
Files
-
79432025b8ea18da6c92dda02c8d7cd08b2815e3a2a21decef17ba5e1be28bbc.exe windows:4 windows x86
be0e81aa4ba64f1d194f9a54efdf4173
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetConnectStatusA
winmm
midiOutPrepareHeader
ws2_32
socket
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
lstrcmpA
user32
GetSysColorBrush
gdi32
CreateDCA
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
SafeArrayDestroy
comctl32
ImageList_DragEnter
wininet
InternetConnectA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.3MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ