Static task
static1
Behavioral task
behavioral1
Sample
236ca80387c50c5ab48d76cf3b89c24622269718c0ca6f0b99e4d810dd043647.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
236ca80387c50c5ab48d76cf3b89c24622269718c0ca6f0b99e4d810dd043647.exe
Resource
win10v2004-20230915-en
General
-
Target
236ca80387c50c5ab48d76cf3b89c24622269718c0ca6f0b99e4d810dd043647
-
Size
14.3MB
-
MD5
714a58ab949b1bd0bd22cfcf1821a7ef
-
SHA1
064148ffb67a749721030ca7c80264e32ef12604
-
SHA256
236ca80387c50c5ab48d76cf3b89c24622269718c0ca6f0b99e4d810dd043647
-
SHA512
ad65b4caddd5f6c8483fb83b3e940f6477926845c0704d076a2610b44a13759e5c4429fab64922a9ce1db653a18af18dfe32650ce7519ec788c8f292d8149fcb
-
SSDEEP
393216:yABstFsce/uR05bdSKYiqJUs5JGFo7tO4qpuIg/hXhB4:yQstFzaxlq2uxtcUhhXhB4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 236ca80387c50c5ab48d76cf3b89c24622269718c0ca6f0b99e4d810dd043647
Files
-
236ca80387c50c5ab48d76cf3b89c24622269718c0ca6f0b99e4d810dd043647.exe windows:4 windows x86
c4e4fe1a7b2f27b5cd7bd4e3409adccd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockFile
user32
GetMenuItemCount
gdi32
CreatePalette
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recvfrom
comdlg32
GetFileTitleA
Sections
.text Size: - Virtual size: 647KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 5.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 13.3MB - Virtual size: 13.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 996KB - Virtual size: 994KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE