Static task
static1
Behavioral task
behavioral1
Sample
e19922edb515d87c2a18cad961f24a838ef672eebcc75a50bf9b45c516a8c833.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e19922edb515d87c2a18cad961f24a838ef672eebcc75a50bf9b45c516a8c833.exe
Resource
win10v2004-20230915-en
General
-
Target
e19922edb515d87c2a18cad961f24a838ef672eebcc75a50bf9b45c516a8c833
-
Size
1.4MB
-
MD5
df964c1685b09c081e7bf749dad5366f
-
SHA1
3106c1106d6d6d4f8b9e13b24d166cb05e2810d5
-
SHA256
e19922edb515d87c2a18cad961f24a838ef672eebcc75a50bf9b45c516a8c833
-
SHA512
11b54c30508ce0db771709e6326075fd04fedf0e991565168f2d0ba7c549f767ff8c51a74b0bdceb9ca82e41013bfc737d30e27d364df556b35e399dee1bebdf
-
SSDEEP
24576:t08mvbsw7pDZRST5rTVui2gthidu1a2d0cB3IpTnzV0S8YFFW7+Ov5RKwZV:t08mTseDZRSTr8gla2uzLttFmP3n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e19922edb515d87c2a18cad961f24a838ef672eebcc75a50bf9b45c516a8c833
Files
-
e19922edb515d87c2a18cad961f24a838ef672eebcc75a50bf9b45c516a8c833.exe windows:4 windows x86
6d6bc37a6ea8a180c61f7f41553586b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiStreamOpen
ws2_32
WSAStartup
kernel32
CreateSemaphoreA
user32
wsprintfA
gdi32
RectVisible
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
VariantCopyInd
comctl32
ImageList_Destroy
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 424KB - Virtual size: 1000KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1016KB - Virtual size: 1016KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ