Static task
static1
Behavioral task
behavioral1
Sample
80dbe64e20dc3cd2b0b22de5348ab4b06b37fdef1ffa0cb44cf8e854e0c9a150.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
80dbe64e20dc3cd2b0b22de5348ab4b06b37fdef1ffa0cb44cf8e854e0c9a150.exe
Resource
win10v2004-20230915-en
General
-
Target
80dbe64e20dc3cd2b0b22de5348ab4b06b37fdef1ffa0cb44cf8e854e0c9a150
-
Size
2.0MB
-
MD5
439274eef56449160b7025d21819177c
-
SHA1
eba907bad856f4d3db85f5b24467c760f1d47891
-
SHA256
80dbe64e20dc3cd2b0b22de5348ab4b06b37fdef1ffa0cb44cf8e854e0c9a150
-
SHA512
06f4d7fb3f29b25f42b671bbf01d061edd12400890f0761f20ee51ea7340b8992f92b513b0deba6bc8a7346c4add3d7cb3573f9b3e155d5230cca1cf06d01658
-
SSDEEP
49152:jjLBMzAoMf9M/wj+8tGXo1mjRqejXod+zPUvM5yLl8S:vLBMzAoM6/wj+38mFqeD1zcvM5yLl8S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80dbe64e20dc3cd2b0b22de5348ab4b06b37fdef1ffa0cb44cf8e854e0c9a150
Files
-
80dbe64e20dc3cd2b0b22de5348ab4b06b37fdef1ffa0cb44cf8e854e0c9a150.exe windows:4 windows x86
228aea6aa8006a50ffbf11c83f5c09fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiOutPrepareHeader
ws2_32
select
kernel32
SetFilePointer
user32
CloseClipboard
gdi32
GetViewportExtEx
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
VariantInit
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 508KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ