Static task
static1
Behavioral task
behavioral1
Sample
6daa93f9c93d9bc21b384dbd439d43c005a0db704eedb62cb9d8ea80cfb17322.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
6daa93f9c93d9bc21b384dbd439d43c005a0db704eedb62cb9d8ea80cfb17322.exe
Resource
win10v2004-20230915-en
General
-
Target
6daa93f9c93d9bc21b384dbd439d43c005a0db704eedb62cb9d8ea80cfb17322
-
Size
12.3MB
-
MD5
f9502df6c85e0096f40d2073dadb2097
-
SHA1
a05af769406cd0a066f50364d110b870ba7dd208
-
SHA256
6daa93f9c93d9bc21b384dbd439d43c005a0db704eedb62cb9d8ea80cfb17322
-
SHA512
37763d817e891d6f89be81f08b4c0e0d57ac3b19e001972369507c882410593f479c2723c9c2aee8b42888ee292e37a49c703de71f5dd4fa8d2c663d17f66b39
-
SSDEEP
393216:NutglHRn57MzKb/q+ZtHX8nQIkkXCDvWV:NXRn5mKb/xZx8QhqAW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6daa93f9c93d9bc21b384dbd439d43c005a0db704eedb62cb9d8ea80cfb17322
Files
-
6daa93f9c93d9bc21b384dbd439d43c005a0db704eedb62cb9d8ea80cfb17322.exe windows:4 windows x86
d9e800ea067a44f085bd6a25b68b9f9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
closesocket
kernel32
GetFileSize
user32
GetSubMenu
gdi32
LineTo
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_GetIcon
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 13KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 396KB - Virtual size: 393KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE