Static task
static1
Behavioral task
behavioral1
Sample
058e047b5ce436b9e59dedb8b1a20fcce77e885e6dc33e68d51bfb9bfc9808d8.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
058e047b5ce436b9e59dedb8b1a20fcce77e885e6dc33e68d51bfb9bfc9808d8.exe
Resource
win10v2004-20230915-en
General
-
Target
058e047b5ce436b9e59dedb8b1a20fcce77e885e6dc33e68d51bfb9bfc9808d8
-
Size
1.8MB
-
MD5
cdc79dd456dd8f49a3d36ad24ce7ae07
-
SHA1
4d4e1e4b97f67322caf5d7bca7a80c674098ef9b
-
SHA256
058e047b5ce436b9e59dedb8b1a20fcce77e885e6dc33e68d51bfb9bfc9808d8
-
SHA512
6ed1f5fa5a5c18b75031e7f37ba6f2d76cf4cd088a883d00a709b51512830380f3f9c41726dd69eda973b95d4d7e8f01e62ad94e6b2c7a2375d96ed868a56fd1
-
SSDEEP
24576:6o0Finx5fm9SjBbANQIQH8wp+hjfj25TAfXi2nGG1BrTbGfb38lGg6w178QIy2w/:6nF4hBbAekKufS2R3qYGjw5S7V7m+I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 058e047b5ce436b9e59dedb8b1a20fcce77e885e6dc33e68d51bfb9bfc9808d8
Files
-
058e047b5ce436b9e59dedb8b1a20fcce77e885e6dc33e68d51bfb9bfc9808d8.exe windows:4 windows x86
16e52a4a686296378bd415eb0dd772ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
user32
LoadIconA
gdi32
GetTextMetricsA
winmm
waveOutUnprepareHeader
winspool.drv
OpenPrinterA
advapi32
RegSetValueExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
inet_addr
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 524KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 976KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 344KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ