Static task
static1
Behavioral task
behavioral1
Sample
6fdf7095aef4f78441aa4743fb378cb9680934b7ee742557217e917a1957b809.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6fdf7095aef4f78441aa4743fb378cb9680934b7ee742557217e917a1957b809.exe
Resource
win10v2004-20230915-en
General
-
Target
6fdf7095aef4f78441aa4743fb378cb9680934b7ee742557217e917a1957b809
-
Size
1.5MB
-
MD5
08d760f76fba9991bff057e8177ef38c
-
SHA1
dac37bf6b9f5e75feba3594d45ad61b8f68fb95a
-
SHA256
6fdf7095aef4f78441aa4743fb378cb9680934b7ee742557217e917a1957b809
-
SHA512
f45af2add49b6ef87aa325c8c1a80700e61d7c90c2647071dbb854273955ecc25d424b702f451ec87b1f3789e28cb0f6185271c19a24c456a78bccf3e01b46b3
-
SSDEEP
49152:XjuZR0ryhyewd4S0z1EKULBcXF3OBh05g:Xj6iryh0CGKUu13OBh05g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6fdf7095aef4f78441aa4743fb378cb9680934b7ee742557217e917a1957b809
Files
-
6fdf7095aef4f78441aa4743fb378cb9680934b7ee742557217e917a1957b809.exe windows:4 windows x86
623d65d56be21611cc94edac44283228
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiStreamProperty
ws2_32
WSACleanup
kernel32
FileTimeToSystemTime
user32
SetForegroundWindow
gdi32
ExtSelectClipRgn
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 524KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 976KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ