Static task
static1
Behavioral task
behavioral1
Sample
d9f640d9b270366b404039f39bf989cbc8e7dad83ef32761c092dba16396df1f.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d9f640d9b270366b404039f39bf989cbc8e7dad83ef32761c092dba16396df1f.exe
Resource
win10v2004-20230915-en
General
-
Target
d9f640d9b270366b404039f39bf989cbc8e7dad83ef32761c092dba16396df1f
-
Size
3.6MB
-
MD5
912b08edf83df96f847e1ec73b255b7e
-
SHA1
691c740ad59099925c5f5cd6417101e442cde3c7
-
SHA256
d9f640d9b270366b404039f39bf989cbc8e7dad83ef32761c092dba16396df1f
-
SHA512
9cdd064bb38055400685e0edbf58546363d05d498426f72c117db7d1592d98e81d2c93c5456e262e8619955cd7dad7b05be188431bc25a2f802c31c0039098ba
-
SSDEEP
98304:MJzMiWdNUY9OJljWFWKRPquuFc0i2qUxM:MJwiuU6MYF7S32
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9f640d9b270366b404039f39bf989cbc8e7dad83ef32761c092dba16396df1f
Files
-
d9f640d9b270366b404039f39bf989cbc8e7dad83ef32761c092dba16396df1f.exe windows:5 windows x86
746f0163877f4a826cd83dd348d68b3f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSACreateEvent
kernel32
RtlUnwind
user32
SendNotifyMessageA
gdi32
ArcTo
msimg32
AlphaBlend
comdlg32
GetOpenFileNameA
winspool.drv
OpenPrinterA
advapi32
RegEnumKeyExA
shell32
ShellExecuteA
comctl32
ImageList_GetIconSize
shlwapi
PathRemoveExtensionA
ole32
CLSIDFromString
oleaut32
SafeArrayGetDim
oledlg
ord8
dbghelp
MiniDumpWriteDump
oleacc
AccessibleObjectFromWindow
gdiplus
GdipBitmapUnlockBits
imm32
ImmGetOpenStatus
winmm
PlaySoundA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.9MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ