Static task
static1
Behavioral task
behavioral1
Sample
f33729c1b8188dd755b6698386b6328eacc04aef2de18d1fc04e84cf0ced91bf.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f33729c1b8188dd755b6698386b6328eacc04aef2de18d1fc04e84cf0ced91bf.exe
Resource
win10v2004-20230915-en
General
-
Target
f33729c1b8188dd755b6698386b6328eacc04aef2de18d1fc04e84cf0ced91bf
-
Size
3.8MB
-
MD5
a6df657f8fa9669902bc9a17e32d5fbf
-
SHA1
80f842dbb1f087041434ddbc028946edd80f5c0d
-
SHA256
f33729c1b8188dd755b6698386b6328eacc04aef2de18d1fc04e84cf0ced91bf
-
SHA512
9e5e4da4627bd52819615f4c148ea0684a80d0efcde1606bf72d54d72d1765b1f59600dadff399b685b121f374ce0737017e46be9d64d7b089b3442113530d6b
-
SSDEEP
98304:Tik5QHxim6N4+9JzwA0cJn60EnmyPnliKMAg9zzWbAzjq:TTQHxj6v9JzRr60rm0Kc9zzWczjq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f33729c1b8188dd755b6698386b6328eacc04aef2de18d1fc04e84cf0ced91bf
Files
-
f33729c1b8188dd755b6698386b6328eacc04aef2de18d1fc04e84cf0ced91bf.exe windows:4 windows x86
700ac858e1b3bc0083cb17ffb6b78d6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
user32
ScrollWindowEx
gdi32
CreateSolidBrush
winspool.drv
OpenPrinterA
comdlg32
GetSaveFileNameA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SafeArrayCreate
comctl32
ImageList_Destroy
secur32
GetUserNameExA
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE