Static task
static1
Behavioral task
behavioral1
Sample
5af1b37eef2834e2dbe47f14bbac06f095d9e90e6ea845c91be374e2f4086bcc.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5af1b37eef2834e2dbe47f14bbac06f095d9e90e6ea845c91be374e2f4086bcc.exe
Resource
win10v2004-20230915-en
General
-
Target
5af1b37eef2834e2dbe47f14bbac06f095d9e90e6ea845c91be374e2f4086bcc
-
Size
15.1MB
-
MD5
02be10f7f5b83ef1a9968e857dd3ffd7
-
SHA1
48cf41fd2bb0d508b18d204249d261564570d25e
-
SHA256
5af1b37eef2834e2dbe47f14bbac06f095d9e90e6ea845c91be374e2f4086bcc
-
SHA512
6025627780083fc6083344bb9522e2975724d62699e51342e3107d4c45703c5e84e0ad401a08e9c909d54aa70f806083736852db40accca020eeca4d3c7bef04
-
SSDEEP
393216:RNkzYXAqIXDOWVSzZFgVdBfx2qytvQ6l6o:/k0XGXHEzZFqBct
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af1b37eef2834e2dbe47f14bbac06f095d9e90e6ea845c91be374e2f4086bcc
Files
-
5af1b37eef2834e2dbe47f14bbac06f095d9e90e6ea845c91be374e2f4086bcc.exe windows:4 windows x86
7d4cfc78d926d9fc82c689b83b7f6896
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutPause
ws2_32
inet_ntoa
rasapi32
RasGetConnectStatusA
kernel32
GetSystemDirectoryA
user32
wsprintfA
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
DragQueryFileA
ole32
OleDuplicateData
oleaut32
VariantChangeType
comctl32
ImageList_Read
oledlg
ord8
wininet
InternetCanonicalizeUrlA
wldap32
ord29
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 14.0MB - Virtual size: 20.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbdi Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bbdi Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ