Static task
static1
Behavioral task
behavioral1
Sample
ab4a54625da5d9f9448f2216ce3a498cb0f7a2606f7870d7633da3b4a5f94623.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ab4a54625da5d9f9448f2216ce3a498cb0f7a2606f7870d7633da3b4a5f94623.exe
Resource
win10v2004-20230915-en
General
-
Target
ab4a54625da5d9f9448f2216ce3a498cb0f7a2606f7870d7633da3b4a5f94623
-
Size
10.3MB
-
MD5
9855ca90929c69f1c5351b26180fc5e6
-
SHA1
709a1ab6c65c07cec43701fc1ca52a18005d565c
-
SHA256
ab4a54625da5d9f9448f2216ce3a498cb0f7a2606f7870d7633da3b4a5f94623
-
SHA512
e790055238390923f6a67f1b87f9256cec5c5fd605a2923c2b8164fc7e92f694f132facc496f7a64e9cce060be91e13f0d1cc45129b3cf67d5c861a3ef20eab3
-
SSDEEP
196608:4iPQd+tlGGAZkDgvh2Ynd47M8Jm8s8Lop5U1sff1sfS6c3tT1iLTLIkV1K38q:4Hd+P2ZD18Vs8sU1o116cdT1iXUkrK3H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ab4a54625da5d9f9448f2216ce3a498cb0f7a2606f7870d7633da3b4a5f94623
Files
-
ab4a54625da5d9f9448f2216ce3a498cb0f7a2606f7870d7633da3b4a5f94623.exe windows:4 windows x86
432fc55f13f2f44d1365d832cb8bcac4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
select
user32
GetClipboardData
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
SHGetSpecialFolderPathA
ole32
CoGetClassObject
oleaut32
SafeArrayAccessData
comctl32
ImageList_Create
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
.text Size: 5.7MB - Virtual size: 8.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE