Static task
static1
Behavioral task
behavioral1
Sample
2a2fa815c8bab21941f5f5e657c66038be014778d8a539f3e0e736a2f94e7b56.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2a2fa815c8bab21941f5f5e657c66038be014778d8a539f3e0e736a2f94e7b56.exe
Resource
win10v2004-20230915-en
General
-
Target
2a2fa815c8bab21941f5f5e657c66038be014778d8a539f3e0e736a2f94e7b56
-
Size
11.8MB
-
MD5
febd9f3fc846a6ffbb50404a7c7063fc
-
SHA1
69276daae0f7184e07911d62effb0db1284d7ff0
-
SHA256
2a2fa815c8bab21941f5f5e657c66038be014778d8a539f3e0e736a2f94e7b56
-
SHA512
a0a5e31e2ac4411de441fccfa1f34f03a1cd967231e3215e62ce1acab981021ea5c0a34767fabf34bafe1fda87172a1a619b366d739fc3d7b069dae90e4ec93e
-
SSDEEP
196608:PbaA3tsDEj9b103bL/QwGPInq9KgVeiPJJLBvgFWjFmJzGMcjb9JeNcGroncOj2x:jB3tsIj950dGPIIHPZvDmwPn9JeEclld
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a2fa815c8bab21941f5f5e657c66038be014778d8a539f3e0e736a2f94e7b56
Files
-
2a2fa815c8bab21941f5f5e657c66038be014778d8a539f3e0e736a2f94e7b56.exe windows:4 windows x86
755c0e5fdeeb9d8da4a6e2654f186c4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiOutPrepareHeader
ws2_32
closesocket
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
user32
GetSysColorBrush
gdi32
CreateDCA
winspool.drv
DocumentPropertiesA
comdlg32
GetSaveFileNameA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CoRevokeClassObject
oleaut32
SafeArrayUnaccessData
comctl32
ImageList_Read
oledlg
ord8
Sections
.text Size: 3.6MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE