Static task
static1
Behavioral task
behavioral1
Sample
f053d1be4bd7cc3e338b7dfe2df69d2f296da8be747fd6ff9225da5648989f8d.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f053d1be4bd7cc3e338b7dfe2df69d2f296da8be747fd6ff9225da5648989f8d.exe
Resource
win10v2004-20230915-en
General
-
Target
f053d1be4bd7cc3e338b7dfe2df69d2f296da8be747fd6ff9225da5648989f8d
-
Size
15.8MB
-
MD5
c12115c6167ae2e9ae34aa8e0aaaa547
-
SHA1
02aef55a5c973941238fd134fb8dfd2ac1f31903
-
SHA256
f053d1be4bd7cc3e338b7dfe2df69d2f296da8be747fd6ff9225da5648989f8d
-
SHA512
d9361ee335b7299fd20eff82b8ef95eae7de3fc3c88dc7a4838f8c799f17f094580ca09e46a68b2b35e09ae518fce1d9582aa87f864f7e122b0bdb3d4aac900e
-
SSDEEP
393216:HzIXYtz+Rc9iWBu9n9MhubM3g9cJLGz/6rFH:T1ScPBuZ9Mjg9AGzuFH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f053d1be4bd7cc3e338b7dfe2df69d2f296da8be747fd6ff9225da5648989f8d
Files
-
f053d1be4bd7cc3e338b7dfe2df69d2f296da8be747fd6ff9225da5648989f8d.exe windows:4 windows x86
aa978c5b2beba164c994ebf8fe47212f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
user32
WaitForInputIdle
gdi32
CreateFontA
winmm
midiStreamClose
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ImageList_DragEnter
ws2_32
closesocket
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 897KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 8.7MB - Virtual size: 8.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 732KB - Virtual size: 730KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 448KB - Virtual size: 446KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE