Static task
static1
Behavioral task
behavioral1
Sample
91fede8f54837a44cc8c387b04ab5ede6c102bfeeb85178c1b9d2817b0da12db.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
91fede8f54837a44cc8c387b04ab5ede6c102bfeeb85178c1b9d2817b0da12db.exe
Resource
win10v2004-20230915-en
General
-
Target
91fede8f54837a44cc8c387b04ab5ede6c102bfeeb85178c1b9d2817b0da12db
-
Size
13.5MB
-
MD5
c17cb1d185b854ecb7fa405a9771411d
-
SHA1
c43cfa1f6ed57fd9880a55b8a5217f841a59f69d
-
SHA256
91fede8f54837a44cc8c387b04ab5ede6c102bfeeb85178c1b9d2817b0da12db
-
SHA512
664114f0239a7f117d3e4e00864ab20d46eb745961a21c3be555f9c79bad4abc8e4a1977a958a98eafdb6286df08981505b64a96290e23c9c1b35ddf02c9e82a
-
SSDEEP
393216:CfvymH8Ft49Y355jn57MeEYU5grc7uVpkVaTk:FFO9Y35Zn5EYU6rhV6VaTk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 91fede8f54837a44cc8c387b04ab5ede6c102bfeeb85178c1b9d2817b0da12db
Files
-
91fede8f54837a44cc8c387b04ab5ede6c102bfeeb85178c1b9d2817b0da12db.exe windows:4 windows x86
5d0eedf304f7931ffe069b6fc3063c1b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
SetLastError
user32
SetMenu
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_Add
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 970KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 351KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 4.8MB - Virtual size: 4.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 10KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 392KB - Virtual size: 388KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE