Static task
static1
Behavioral task
behavioral1
Sample
9193e5197c384e39b7f15b1ff214cd1dd782b0ffba7fcbcd36e30687dcfb1a8b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9193e5197c384e39b7f15b1ff214cd1dd782b0ffba7fcbcd36e30687dcfb1a8b.exe
Resource
win10v2004-20230915-en
General
-
Target
9193e5197c384e39b7f15b1ff214cd1dd782b0ffba7fcbcd36e30687dcfb1a8b
-
Size
1.4MB
-
MD5
80e337fc92969df8035279a902f6903f
-
SHA1
24b64faf2094420d9f8bffc4090623d6d5d1c81d
-
SHA256
9193e5197c384e39b7f15b1ff214cd1dd782b0ffba7fcbcd36e30687dcfb1a8b
-
SHA512
13a8624aa7c362922e1dbaad7c36fab946b884714550c6588b76e85b47d8e10f77d2b8924850f379b8c9a58b863f2e464f1b61598d5558d638f9317fb189ab3c
-
SSDEEP
24576:praXf/iG079oduOLrleCPZiG2ExSrXjP6Vj4/KNob/FaCiG21bfICCvTQa8NcER3:prav/iG49odRvlegh2ExSTjP60cCf21/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9193e5197c384e39b7f15b1ff214cd1dd782b0ffba7fcbcd36e30687dcfb1a8b
Files
-
9193e5197c384e39b7f15b1ff214cd1dd782b0ffba7fcbcd36e30687dcfb1a8b.exe windows:4 windows x86
d94df3d11d32ec48c5b3a279b15a7f13
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
user32
LoadIconA
gdi32
GetTextMetricsA
winmm
waveOutUnprepareHeader
winspool.drv
OpenPrinterA
advapi32
RegSetValueExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
inet_ntoa
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 432KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 968KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ