Static task
static1
Behavioral task
behavioral1
Sample
b0e4967721f1950ccc4cbcef25a57f1b40f6751bcf9f16ef7350ae9eddfc46e8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b0e4967721f1950ccc4cbcef25a57f1b40f6751bcf9f16ef7350ae9eddfc46e8.exe
Resource
win10v2004-20230915-en
General
-
Target
b0e4967721f1950ccc4cbcef25a57f1b40f6751bcf9f16ef7350ae9eddfc46e8
-
Size
3.4MB
-
MD5
b61ee38a669ab08cd1311335c616d506
-
SHA1
2dd63f5a444ef1cef07990ac9f580e4ca5bb021b
-
SHA256
b0e4967721f1950ccc4cbcef25a57f1b40f6751bcf9f16ef7350ae9eddfc46e8
-
SHA512
fb668e6059698e883b78cdde96a4070592ba872eb92886fd6e5071e541d364385d0c201f1a7658e00f72732a583e86bd14c4e2ac653ef4e1751b3fbbecb5331b
-
SSDEEP
49152:IOd4c0tgrBnR0DmkwDdvqi/TVu2CopMCOT4O92ZZCNw032rYrabUz:IOdzlnFkQCUg91J92W72AabU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b0e4967721f1950ccc4cbcef25a57f1b40f6751bcf9f16ef7350ae9eddfc46e8
Files
-
b0e4967721f1950ccc4cbcef25a57f1b40f6751bcf9f16ef7350ae9eddfc46e8.exe windows:4 windows x86
7482cada4e6b6caa80e405a4cd9f5593
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
CryptAcquireContextA
version
GetFileVersionInfoA
wsock32
WSAAsyncGetHostByName
winspool.drv
ClosePrinter
comctl32
FlatSB_GetScrollInfo
comdlg32
GetOpenFileNameW
gdi32
AbortDoc
msimg32
AlphaBlend
shell32
SHGetFileInfoW
user32
ActivateKeyboardLayout
winmm
sndPlaySoundA
ole32
CLSIDFromProgID
oleaut32
CreateErrorInfo
gdiplus
GdiplusStartup
Sections
.text Size: 3.4MB - Virtual size: 9.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE