Static task
static1
Behavioral task
behavioral1
Sample
877e0d090c56dd7445c90cba47ae93b46b0549a3dfbb482d9d94b688e8184840.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
877e0d090c56dd7445c90cba47ae93b46b0549a3dfbb482d9d94b688e8184840.exe
Resource
win10v2004-20230915-en
General
-
Target
877e0d090c56dd7445c90cba47ae93b46b0549a3dfbb482d9d94b688e8184840
-
Size
4.4MB
-
MD5
2f3dafacc84dfc76111b6b0619889f2f
-
SHA1
378ded13f72c6da3e072f4f33b1ce4a4cd5d54d1
-
SHA256
877e0d090c56dd7445c90cba47ae93b46b0549a3dfbb482d9d94b688e8184840
-
SHA512
b111833d4bbab7c6a51b8ad5741a31842c21990d32c65c02348f1a2bef65ae5a8cb2b12b078a21aa70f47a96564a8d036c6f7e33174518ceb221f9f68003f5e6
-
SSDEEP
98304:3ElFgM1YTznVKQsVXrP81G3yujqCcttO0vS0OmktNvVQpF:+FgM1Y3VRC7E1G3PjS5JYnvCn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 877e0d090c56dd7445c90cba47ae93b46b0549a3dfbb482d9d94b688e8184840
Files
-
877e0d090c56dd7445c90cba47ae93b46b0549a3dfbb482d9d94b688e8184840.exe windows:4 windows x86
9adb67d08f90c709f99e46019184576e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutPrepareHeader
ws2_32
ntohl
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
GetVersion
user32
GetSysColorBrush
gdi32
GetTextColor
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 3.5MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 768KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ