Static task
static1
Behavioral task
behavioral1
Sample
9bcceb9acd3ebb28381881f3c001cddd82782ff381ba2d8daee5ada10bd885ce.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9bcceb9acd3ebb28381881f3c001cddd82782ff381ba2d8daee5ada10bd885ce.exe
Resource
win10v2004-20230915-en
General
-
Target
9bcceb9acd3ebb28381881f3c001cddd82782ff381ba2d8daee5ada10bd885ce
-
Size
15.6MB
-
MD5
d87820aa9349001708f300976291ef64
-
SHA1
12a5fa8ed400f76b12026be11186fa9db92493a1
-
SHA256
9bcceb9acd3ebb28381881f3c001cddd82782ff381ba2d8daee5ada10bd885ce
-
SHA512
eca86c652392c08564ebb2475ff7bd0854da2878e6d0042d7980619d203ad1654b32d8ada2a086426b26a3a80201a88d269dfd18d2c6b65ac15b9a12b5d72f98
-
SSDEEP
393216:E0mOZ96AWjDQogyytGGM13BUVR1p9aDOVmooAMXLONf+fajkje:EXaRJoAgtBozIRAMby+YEe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bcceb9acd3ebb28381881f3c001cddd82782ff381ba2d8daee5ada10bd885ce
Files
-
9bcceb9acd3ebb28381881f3c001cddd82782ff381ba2d8daee5ada10bd885ce.exe windows:4 windows x86
892a7752c3d5247362dd6ea88e8665ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
select
user32
wsprintfA
gdi32
PtVisible
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayAccessData
comctl32
ImageList_Read
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
Size: 629KB - Virtual size: 8.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE