Static task
static1
Behavioral task
behavioral1
Sample
f6869af63fe68eece2fb864d6e037dfe4f9ecb4f41250763ece34c7dd6930d0c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f6869af63fe68eece2fb864d6e037dfe4f9ecb4f41250763ece34c7dd6930d0c.exe
Resource
win10v2004-20230915-en
General
-
Target
f6869af63fe68eece2fb864d6e037dfe4f9ecb4f41250763ece34c7dd6930d0c
-
Size
2.7MB
-
MD5
2f05adda29769990f96eb2cb902df5c3
-
SHA1
d95b9be436298cc5f4709fd700451e57529886dc
-
SHA256
f6869af63fe68eece2fb864d6e037dfe4f9ecb4f41250763ece34c7dd6930d0c
-
SHA512
2d41b3c55bbede3fa68d77d7fa48d643effd514fd00e6c6923e3857cb05f3dc0b6dd6376c05c2f60bc718227cd38b927f35a86f4dc27c68a89465659f959c1df
-
SSDEEP
49152:S7b0P/8XjF3rzXPM4Z/yWst9M4gsoUlUcayFZqXxoPB2xuwalJr9lny:S7g8RbzrsbK8dhAI2Ifa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6869af63fe68eece2fb864d6e037dfe4f9ecb4f41250763ece34c7dd6930d0c
Files
-
f6869af63fe68eece2fb864d6e037dfe4f9ecb4f41250763ece34c7dd6930d0c.exe windows:4 windows x86
a7380d508620a44cc2867fb04b6c3b72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
UnmapViewOfFile
user32
LoadBitmapA
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.3MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ