Static task
static1
Behavioral task
behavioral1
Sample
0abd44761e1fbc6e72cf579a904c188cefb51f8cfffcb7474f32c7bcecc7b76b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0abd44761e1fbc6e72cf579a904c188cefb51f8cfffcb7474f32c7bcecc7b76b.exe
Resource
win10v2004-20230915-en
General
-
Target
0abd44761e1fbc6e72cf579a904c188cefb51f8cfffcb7474f32c7bcecc7b76b
-
Size
1.8MB
-
MD5
94f581207c70c7707f6abfbd8dea78ac
-
SHA1
fcd452bdf8090d07462af343d3b6a2e0926909e1
-
SHA256
0abd44761e1fbc6e72cf579a904c188cefb51f8cfffcb7474f32c7bcecc7b76b
-
SHA512
4a91289bdafea3936fed64489d6fd0edcc1a570bd2c80a0e9afc1c94cf1b2c7df478efe5296508e2c388bece886df0b475a73fb7fbc7505474c557603b0c166e
-
SSDEEP
49152:Yv9WMz7Jl9ldTLdEIHiVaU5ZHgGa+KCti:Y9z7JNEAig2an+I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0abd44761e1fbc6e72cf579a904c188cefb51f8cfffcb7474f32c7bcecc7b76b
Files
-
0abd44761e1fbc6e72cf579a904c188cefb51f8cfffcb7474f32c7bcecc7b76b.exe windows:4 windows x86
0aa24536129772645f5c9dcd05d8cd25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetTimeZoneInformation
user32
GetSystemMenu
gdi32
PtVisible
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_Add
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 388KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1024KB - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ