Static task
static1
Behavioral task
behavioral1
Sample
0a4c7da6b3e847e4024b813407b905d5f1768165e5501622fed71ee5483926f8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0a4c7da6b3e847e4024b813407b905d5f1768165e5501622fed71ee5483926f8.exe
Resource
win10v2004-20230915-en
General
-
Target
0a4c7da6b3e847e4024b813407b905d5f1768165e5501622fed71ee5483926f8
-
Size
1.4MB
-
MD5
394f3a6b994277004ed9c564e17151f9
-
SHA1
0f95475cc04ac9a60081a86ac1ce2c875770017d
-
SHA256
0a4c7da6b3e847e4024b813407b905d5f1768165e5501622fed71ee5483926f8
-
SHA512
51e4430e2611b3310629fb82ee6161eb7ce0201f4f4ab0a3d483e58acbeeb4b0fb16661f5f4f856f04a91c59694ceaaddd0f76eed00c166625c2c2d641b0219e
-
SSDEEP
24576:40vAvPHE+0pE/A+kTCO8LDG4XFy1ugXcK9+xkZDEGkVTaoy:YfE+0pEMT98PTXFyAgXL+UEk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a4c7da6b3e847e4024b813407b905d5f1768165e5501622fed71ee5483926f8
Files
-
0a4c7da6b3e847e4024b813407b905d5f1768165e5501622fed71ee5483926f8.exe windows:4 windows x86
5ff0eb147d509b8089681406c91d8d03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
htonl
kernel32
SetFilePointer
user32
SetWindowRgn
gdi32
GetTextMetricsA
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueExA
shell32
SHEmptyRecycleBinA
ole32
CoDisconnectObject
oleaut32
VariantTimeToSystemTime
comctl32
ord17
oledlg
ord8
wininet
DeleteUrlCacheEntry
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 588KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.etbdata Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.etbdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ