Static task
static1
Behavioral task
behavioral1
Sample
2f410b7f96fa7c8822c7875a3900b058e9524deaace1b4ece916db1f3678ffc0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2f410b7f96fa7c8822c7875a3900b058e9524deaace1b4ece916db1f3678ffc0.exe
Resource
win10v2004-20230915-en
General
-
Target
2f410b7f96fa7c8822c7875a3900b058e9524deaace1b4ece916db1f3678ffc0
-
Size
15.5MB
-
MD5
edb89543ee176c8c43401fbb763a10f8
-
SHA1
c3d61c00ab41332903b3e54d075206a6eccd9e77
-
SHA256
2f410b7f96fa7c8822c7875a3900b058e9524deaace1b4ece916db1f3678ffc0
-
SHA512
79060f42c4ae56b966ef7d32bd9c72ba03483d5443152aec902f1bb8d90b2634342968ae9ecda1c597348272e3a2f32203400c1d66aa352c42d9ea37965f97d9
-
SSDEEP
393216:E0mOZ96AWjDQogyytGGM13BUVR1p9aDOVmoMAMXLOxQ1Dt/zjiGM:EXaZJoAgtBozIVAMbT/zjU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f410b7f96fa7c8822c7875a3900b058e9524deaace1b4ece916db1f3678ffc0
Files
-
2f410b7f96fa7c8822c7875a3900b058e9524deaace1b4ece916db1f3678ffc0.exe windows:4 windows x86
892a7752c3d5247362dd6ea88e8665ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
select
user32
wsprintfA
gdi32
PtVisible
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayAccessData
comctl32
ImageList_Read
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
Size: 629KB - Virtual size: 8.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE