Static task
static1
Behavioral task
behavioral1
Sample
9aa6da4f9f0a9a1b59ef957d24e73a8bca278d3b40573a5fff2d6b95a761291d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9aa6da4f9f0a9a1b59ef957d24e73a8bca278d3b40573a5fff2d6b95a761291d.exe
Resource
win10v2004-20230915-en
General
-
Target
9aa6da4f9f0a9a1b59ef957d24e73a8bca278d3b40573a5fff2d6b95a761291d
-
Size
13.3MB
-
MD5
589aceafaeaf44bb5038266e843386fe
-
SHA1
7e853438857e30256ea1775a1ae4e99cd2b59ce3
-
SHA256
9aa6da4f9f0a9a1b59ef957d24e73a8bca278d3b40573a5fff2d6b95a761291d
-
SHA512
b17015b84b1cd4724d91bb511c5ef34b0b939cb4e2e1b1d7ee69541e973ee1cd58db51a95f101b0e0a4cfacd5390919eb0c3cd730503618e7b4a2f022464a0bb
-
SSDEEP
196608:xyLAu99jwtDXV9vhxxRXqVkMUB++z9zgUkTd6CcI2iVjYxr8SJ4PEX8LDg:EAmjwtDXxfRa+MUBXpvCROr8SfX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9aa6da4f9f0a9a1b59ef957d24e73a8bca278d3b40573a5fff2d6b95a761291d
Files
-
9aa6da4f9f0a9a1b59ef957d24e73a8bca278d3b40573a5fff2d6b95a761291d.exe windows:4 windows x86
43d100ef81f7332ff766579213a818b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
accept
kernel32
SetLastError
user32
ScrollWindowEx
gdi32
FillRgn
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetDim
comctl32
ord17
wldap32
ord29
Sections
.text Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 447KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 772KB - Virtual size: 769KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 404KB - Virtual size: 401KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE