Static task
static1
Behavioral task
behavioral1
Sample
64e1502fedc3e95fff374dbce0c67fc4450ba396a4cbf8aedc37163d5d65fb50.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
64e1502fedc3e95fff374dbce0c67fc4450ba396a4cbf8aedc37163d5d65fb50.exe
Resource
win10v2004-20230915-en
General
-
Target
64e1502fedc3e95fff374dbce0c67fc4450ba396a4cbf8aedc37163d5d65fb50
-
Size
3.0MB
-
MD5
75f4e73b7706d303207512221de6cc5a
-
SHA1
55ff4d291045d9acb3cf565fdd92c26b2ace3d91
-
SHA256
64e1502fedc3e95fff374dbce0c67fc4450ba396a4cbf8aedc37163d5d65fb50
-
SHA512
54d9e7ad0692a838dbaabd43793fae1711aaf578bb26df4b25d8e7f79439a1cf5038d482cd5d38d2e186f6b97c234a48ea67ba051a14be25689f8d0fb207aa44
-
SSDEEP
98304:KSyMfX2eHIprojtC7sTij4FJfQ/xrxp5vJ65miVnkrYv:xv2eHEoRg4FJGdLvU5miVnkrYv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64e1502fedc3e95fff374dbce0c67fc4450ba396a4cbf8aedc37163d5d65fb50
Files
-
64e1502fedc3e95fff374dbce0c67fc4450ba396a4cbf8aedc37163d5d65fb50.exe windows:4 windows x86
700ac858e1b3bc0083cb17ffb6b78d6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
user32
ScrollWindowEx
gdi32
CreateSolidBrush
winspool.drv
OpenPrinterA
comdlg32
GetSaveFileNameA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SafeArrayCreate
comctl32
ImageList_Destroy
secur32
GetUserNameExA
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE