Static task
static1
Behavioral task
behavioral1
Sample
834ac97c749070b5b22c72df16bb4954a2a365a7978d9165d497011cd2722773.exe
Resource
win7-20230831-en
General
-
Target
834ac97c749070b5b22c72df16bb4954a2a365a7978d9165d497011cd2722773
-
Size
5.2MB
-
MD5
a29eab8d5ddc2d65bce07fa8c2490027
-
SHA1
b98887c33dccea18a7413d9c98736c556e3c1d25
-
SHA256
834ac97c749070b5b22c72df16bb4954a2a365a7978d9165d497011cd2722773
-
SHA512
3b630fe39901209e92c175187c9faaf9259c2f4f89f531a8dbd9299119e71538e88b628dfc5a10d5bf6816cfb9b20ce10c9b8ead7005bee2ec7e1b594f2f91aa
-
SSDEEP
98304:1aB6fv9JckVsd4YGuW+F0rxHvdqTpaM3DGb7lbTFF3S1a0S5oABj:pckVI0PPHkTpkHFca0S2ABj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 834ac97c749070b5b22c72df16bb4954a2a365a7978d9165d497011cd2722773
Files
-
834ac97c749070b5b22c72df16bb4954a2a365a7978d9165d497011cd2722773.exe windows:4 windows x86
acf00dc7727998eccddd347b620fc392
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
midiOutReset
ws2_32
ntohl
kernel32
GetTimeZoneInformation
user32
CheckMenuItem
gdi32
Chord
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
ChooseColorA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
LoadTypeLi
comctl32
ord17
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 3.8MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ