Static task
static1
Behavioral task
behavioral1
Sample
b1e6a0597cfb538dd205d162ec10ec4611b2bd93d95056e61f3205b0db120464.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b1e6a0597cfb538dd205d162ec10ec4611b2bd93d95056e61f3205b0db120464.exe
Resource
win10v2004-20230915-en
General
-
Target
b1e6a0597cfb538dd205d162ec10ec4611b2bd93d95056e61f3205b0db120464
-
Size
3.2MB
-
MD5
1f5922889efbad2e1b792380140bb108
-
SHA1
064866c39f4bb68ecbfe48086bf9eae04aba93fa
-
SHA256
b1e6a0597cfb538dd205d162ec10ec4611b2bd93d95056e61f3205b0db120464
-
SHA512
280fbd490c0bf08deabdfd8216f97f8031f9bc57f96caf6845ee440a5e43882a7135e6798a67271a8fe913cd82f707a4acba1dc5424d75d1a4535dce12422b59
-
SSDEEP
49152:hKqOccXvizogdD6pAP2lv6lO+zgd8Oe7Uv9kkLEAYviLPI8GbnXnlUQIx:huS7dD6mc60+gdvPv9kKDdLPF4n3lUQw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b1e6a0597cfb538dd205d162ec10ec4611b2bd93d95056e61f3205b0db120464
Files
-
b1e6a0597cfb538dd205d162ec10ec4611b2bd93d95056e61f3205b0db120464.exe windows:4 windows x86
f10476db9a9ef28bbdc869c631538149
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
midiStreamOut
ws2_32
closesocket
kernel32
GetVersion
user32
CharNextA
gdi32
CreateFontIndirectA
winspool.drv
ClosePrinter
comdlg32
ChooseColorA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CoTaskMemFree
oleaut32
VariantChangeType
comctl32
ord17
oledlg
ord8
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.1MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ