Static task
static1
Behavioral task
behavioral1
Sample
95b1fefc749dba3a620d9b3090bfa979d621815f3fa84fa2cd788d7e3008e537.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
95b1fefc749dba3a620d9b3090bfa979d621815f3fa84fa2cd788d7e3008e537.exe
Resource
win10v2004-20230915-en
General
-
Target
95b1fefc749dba3a620d9b3090bfa979d621815f3fa84fa2cd788d7e3008e537
-
Size
712KB
-
MD5
6add219a4532721d01b79a7a5c1635d0
-
SHA1
73282f8f9555cba0f920d9733e13cd1db502e7ec
-
SHA256
95b1fefc749dba3a620d9b3090bfa979d621815f3fa84fa2cd788d7e3008e537
-
SHA512
4f392ca97339f38e92310943b3a7aca4cd2fa2fd30566e8f421f2ced65b8b79352d53261357b922d7c820e8c4b5dfb32264ba7aa17142cba4bb12cceba62e1ef
-
SSDEEP
12288:5qD99vZqXFEATdiv9yVktk0kGpk7sxYznh2mMP8qlpwnLr1+l9t2Obx3w+mC:5qh9RqeM29ykrpk7sjP8qlpwLr5C9wi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95b1fefc749dba3a620d9b3090bfa979d621815f3fa84fa2cd788d7e3008e537
Files
-
95b1fefc749dba3a620d9b3090bfa979d621815f3fa84fa2cd788d7e3008e537.exe windows:4 windows x86
a0f8e97d554fe3f9f2bb041742d6f50d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
CreateWindowExA
gdi32
SelectObject
gdiplus
GdipGetImageGraphicsContext
ole32
CoUninitialize
imm32
ImmAssociateContext
shell32
SHAppBarMessage
shlwapi
PathFileExistsA
winmm
PlaySoundA
ws2_32
socket
rasapi32
RasGetConnectStatusA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
oleaut32
LoadTypeLi
comctl32
ImageList_Add
wininet
InternetCloseHandle
comdlg32
GetFileTitleA
Sections
CODE Size: 699KB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE