Static task
static1
Behavioral task
behavioral1
Sample
b1d6d4279fe21b3bf4ce92f6045ee13b80264ece1884ccec4d72e40c19ffcb6c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b1d6d4279fe21b3bf4ce92f6045ee13b80264ece1884ccec4d72e40c19ffcb6c.exe
Resource
win10v2004-20230915-en
General
-
Target
b1d6d4279fe21b3bf4ce92f6045ee13b80264ece1884ccec4d72e40c19ffcb6c
-
Size
15.5MB
-
MD5
56e959db9bebf19f478b98b17e16c36c
-
SHA1
888a9a37d0f27f0f09715128715c85f20988ebc8
-
SHA256
b1d6d4279fe21b3bf4ce92f6045ee13b80264ece1884ccec4d72e40c19ffcb6c
-
SHA512
d74d905a057c85179a6f6bac5780e265877eed51351d8f12e95c2edf717e86da2556fc0a49dcc699f42c63f5bc32aa4c0f5dd3edbc72fa6088e4fc2cc7031b6a
-
SSDEEP
393216:Gx9fZMaaghic8qtoZZQM2wueACkZVFhLnJdtU9qof6EEre1cMk:Gx9BEgQcRtoZZX2WoFLnPtU9qZ4k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1d6d4279fe21b3bf4ce92f6045ee13b80264ece1884ccec4d72e40c19ffcb6c
Files
-
b1d6d4279fe21b3bf4ce92f6045ee13b80264ece1884ccec4d72e40c19ffcb6c.exe windows:5 windows x86
af7160ea57666529810f95460436f2e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
getpeername
kernel32
TlsFree
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
PostQuitMessage
gdi32
GetSystemPaletteEntries
winspool.drv
ClosePrinter
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
RegisterTypeLi
comctl32
ord17
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 518KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 13.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 183KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: - Virtual size: 812KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�������� Size: 15.5MB - Virtual size: 15.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ