Static task
static1
Behavioral task
behavioral1
Sample
9a8d1334a7a369b3e2f4a19f5ab7590cf7077aab5d3308829319f26af58e1bb3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9a8d1334a7a369b3e2f4a19f5ab7590cf7077aab5d3308829319f26af58e1bb3.exe
Resource
win10v2004-20230915-en
General
-
Target
9a8d1334a7a369b3e2f4a19f5ab7590cf7077aab5d3308829319f26af58e1bb3
-
Size
13.5MB
-
MD5
d10b535ecac7bd7e5f3fb739f8fa07f4
-
SHA1
c4d38949fcadd2a887d07702b53e527ca07c791a
-
SHA256
9a8d1334a7a369b3e2f4a19f5ab7590cf7077aab5d3308829319f26af58e1bb3
-
SHA512
d66ac9c915223421e162610f557b84d1b69475908887fad8f6ff75f58782b87dd7f2f72b6d6ce014d4884b0973a7eb6974bf6378826ca41989b2ecc9093473b2
-
SSDEEP
393216:M8xgcWPUxKPGYZp9xHMgTMpcrV1a1SzE0B8VXAjaN3LvMGJn6:MXPUvgTMpcrV1aEz/Bn+N3wsn6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a8d1334a7a369b3e2f4a19f5ab7590cf7077aab5d3308829319f26af58e1bb3
Files
-
9a8d1334a7a369b3e2f4a19f5ab7590cf7077aab5d3308829319f26af58e1bb3.exe windows:5 windows x86
432473614c5404d0c59187620457d79c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
recvfrom
rasapi32
RasHangUpA
kernel32
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetMenu
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_Add
wininet
InternetCloseHandle
comdlg32
ChooseColorA
wtsapi32
WTSSendMessageW
Sections
.xilou Size: - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xilou Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xilou Size: - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xilou Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xilou Size: - Virtual size: 24B
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xilou Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xilou Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xilou Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xilou Size: 8.2MB - Virtual size: 8.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE