Static task
static1
Behavioral task
behavioral1
Sample
f260b59349ef9c6b0424b390a86152b4beb9265781da81df3bc8e103e7cbe270.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f260b59349ef9c6b0424b390a86152b4beb9265781da81df3bc8e103e7cbe270.exe
Resource
win10v2004-20230915-en
General
-
Target
f260b59349ef9c6b0424b390a86152b4beb9265781da81df3bc8e103e7cbe270
-
Size
9.3MB
-
MD5
e2454a3c032dd531569cecbc30f58aba
-
SHA1
e1ea3204cd58003a52601432b4d7fccd02405944
-
SHA256
f260b59349ef9c6b0424b390a86152b4beb9265781da81df3bc8e103e7cbe270
-
SHA512
ea6f89ec3626fca5878a6c55b21a0be3b4d68ffc5a6352829db811c913dcdb6dce987ace3797cf2c2c3779a5864953fbabb04f4ea9f02eef6c1fb28fdef43733
-
SSDEEP
196608:X+xsX588Mg+8KA/An55cyjRw7aBU96O2VVqFbsatg+P:X+MC8MgJKEAn5iyjRaaBU96OaIFbsE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f260b59349ef9c6b0424b390a86152b4beb9265781da81df3bc8e103e7cbe270
Files
-
f260b59349ef9c6b0424b390a86152b4beb9265781da81df3bc8e103e7cbe270.exe windows:5 windows x86
6bb84c5d91700bd207aa533a5d1890e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
winmm
PlaySoundA
gdi32
DeleteObject
advapi32
RegCloseKey
user32
CreateWindowStationA
CharUpperBuffW
shell32
SHGetSpecialFolderPathA
shlwapi
PathFileExistsA
ws2_32
getsockname
winspool.drv
DocumentPropertiesA
comctl32
ImageList_DragMove
Sections
.text Size: - Virtual size: 813KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 597KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.w+c Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
..q` Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Hmf Size: 9.3MB - Virtual size: 9.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ