Static task
static1
Behavioral task
behavioral1
Sample
19d0b853f8f8420460be18ff232bf804f30f70dcda161e59f14e9522455a82ca.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
19d0b853f8f8420460be18ff232bf804f30f70dcda161e59f14e9522455a82ca.exe
Resource
win10v2004-20230915-en
General
-
Target
19d0b853f8f8420460be18ff232bf804f30f70dcda161e59f14e9522455a82ca
-
Size
1.9MB
-
MD5
6ea09d4af2e3db28efea3a053a439ee7
-
SHA1
9fd5859d5f3b91ad1500f343131ad70ba3d16b70
-
SHA256
19d0b853f8f8420460be18ff232bf804f30f70dcda161e59f14e9522455a82ca
-
SHA512
b986cf8c53ca5b1c5c5e2d8dabb9c4fc09075358984870eb250481a42a88dd03ef7c98bd4d084dadeac1b235c4ed2fa21cee106a574d83abd10041cb9aba9b92
-
SSDEEP
24576:9EOqOyQGF4il5JsamEU5+dPoN3h4/DSxzdHtIPSbeNOZz1ZhZAxhj3d5eUHeNX/T:AlAjj4bSxRuPkIOZz1ZvAjNvC33
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19d0b853f8f8420460be18ff232bf804f30f70dcda161e59f14e9522455a82ca
Files
-
19d0b853f8f8420460be18ff232bf804f30f70dcda161e59f14e9522455a82ca.exe windows:4 windows x86
e43606504ac62824418747739a53fc21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
htonl
rasapi32
RasHangUpA
kernel32
Process32Next
user32
SetTimer
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
InitializeSecurityDescriptor
shell32
ShellExecuteA
ole32
OleUninitialize
oleaut32
LoadTypeLi
comctl32
ord17
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 944KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1020KB - Virtual size: 1020KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ