Static task
static1
Behavioral task
behavioral1
Sample
d06a1af7852a33efbd542a3e9ed9cccdac598f011185d1e3c447896999c88fb7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d06a1af7852a33efbd542a3e9ed9cccdac598f011185d1e3c447896999c88fb7.exe
Resource
win10v2004-20230915-en
General
-
Target
d06a1af7852a33efbd542a3e9ed9cccdac598f011185d1e3c447896999c88fb7
-
Size
1.5MB
-
MD5
7659ba141bb25d0d2775a24b31f890b4
-
SHA1
1ca6fc334d3d67c75c56144f3ca7b20a621ca74a
-
SHA256
d06a1af7852a33efbd542a3e9ed9cccdac598f011185d1e3c447896999c88fb7
-
SHA512
944486e14ae6b09f7de2911dbbcea0567a6cc60e0d2c8357abeebb79e94af0915f415aab8a34f0b5075a2fb1ebc532353fd8fd9d2382d011e803fc0d760f9a17
-
SSDEEP
24576:D3NC5SWrZ9ouwHUUVVA+aF1DNa9+ERW21qJzFes0jHTZgnGvB346L04PRh+:rNC5SWd9ou8RA+aF7awLTe5HcGFZ0Wh+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d06a1af7852a33efbd542a3e9ed9cccdac598f011185d1e3c447896999c88fb7
Files
-
d06a1af7852a33efbd542a3e9ed9cccdac598f011185d1e3c447896999c88fb7.exe windows:4 windows x86
150d7e46666af5e5fa262549ea029a80
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
SetEndOfFile
user32
OpenClipboard
gdi32
SelectPalette
winmm
waveOutUnprepareHeader
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantCopy
comctl32
ord17
ws2_32
recvfrom
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 460KB - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ