_Scintilla_DirectFunction@16
Static task
static1
Behavioral task
behavioral1
Sample
310d8513c0f2be2999d4b83a17a86364aa57291015db6ed54683b4e323e1a915.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
310d8513c0f2be2999d4b83a17a86364aa57291015db6ed54683b4e323e1a915.exe
Resource
win10v2004-20230915-en
General
-
Target
310d8513c0f2be2999d4b83a17a86364aa57291015db6ed54683b4e323e1a915
-
Size
8.7MB
-
MD5
c107cb5ce3ba4f17449e74c4a52b8906
-
SHA1
d129e010a08f74813cf2c444e5a7aeb240516d6d
-
SHA256
310d8513c0f2be2999d4b83a17a86364aa57291015db6ed54683b4e323e1a915
-
SHA512
5543f2f6538fe35f377fbae57815f86ba4f17d3231539ece69d241dc595b9c32e960dea925161cad7acded7d5e9aa4833211676b827caf22bc6d2cdee4fd98f6
-
SSDEEP
196608:oVO4hr619WPWZn7tM/v1BdoO5A4Uc2DWcLFCPOQYW2KODUOudM:oXMWPE76f75ic2DW6JQcKODLuq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 310d8513c0f2be2999d4b83a17a86364aa57291015db6ed54683b4e323e1a915
Files
-
310d8513c0f2be2999d4b83a17a86364aa57291015db6ed54683b4e323e1a915.exe windows:4 windows x86
e6679f1c2672f971ca25678fb5d0e505
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutPause
ws2_32
closesocket
version
VerLanguageNameA
rasapi32
RasHangUpA
kernel32
GetWindowsDirectoryA
user32
GetClassNameA
gdi32
ExcludeClipRect
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
SafeArrayUnaccessData
comctl32
ImageList_ReplaceIcon
imm32
ImmReleaseContext
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Exports
Exports
Sections
.text Size: 6.0MB - Virtual size: 10.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ