Static task
static1
Behavioral task
behavioral1
Sample
c80dfa5ad9938fa90bc2927df36718cef0aecc9633b9b9db1a3a37bd4e0f9b23.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c80dfa5ad9938fa90bc2927df36718cef0aecc9633b9b9db1a3a37bd4e0f9b23.exe
Resource
win10v2004-20230915-en
General
-
Target
c80dfa5ad9938fa90bc2927df36718cef0aecc9633b9b9db1a3a37bd4e0f9b23
-
Size
15.0MB
-
MD5
2f87223474a9137c72bb800125d9f1cf
-
SHA1
c07d8348ba71610e25b20f69575cee6c11a6c9da
-
SHA256
c80dfa5ad9938fa90bc2927df36718cef0aecc9633b9b9db1a3a37bd4e0f9b23
-
SHA512
fe22fe4ca0e51113664b057edd35c4a9aa13229b43d21310cdae0761a7bc80ac18b712f99cd4e76578919cfb595da65c73cd6c537f70f13c32efade9d9482de7
-
SSDEEP
393216:uSZKLlCmPYbTu0hUDw8n57MtWTKmA6OFOU:NABXAb60hSn5wWTLOF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c80dfa5ad9938fa90bc2927df36718cef0aecc9633b9b9db1a3a37bd4e0f9b23
Files
-
c80dfa5ad9938fa90bc2927df36718cef0aecc9633b9b9db1a3a37bd4e0f9b23.exe windows:4 windows x86
0338e20c8e9afb58d9774d2a6e93915a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
CreateSemaphoreA
user32
LoadBitmapA
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 690KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 304KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 5.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 464KB - Virtual size: 463KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE