Static task
static1
Behavioral task
behavioral1
Sample
a8f873baff34362d2ec792dfcf4643edc39f30ab0f9a7f29bafb0ff1a1a6885e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a8f873baff34362d2ec792dfcf4643edc39f30ab0f9a7f29bafb0ff1a1a6885e.exe
Resource
win10v2004-20230915-en
General
-
Target
a8f873baff34362d2ec792dfcf4643edc39f30ab0f9a7f29bafb0ff1a1a6885e
-
Size
479KB
-
MD5
5031d62351cd8f813801b10e699152d5
-
SHA1
7405e808c1ddece1d2d0a809c0b02bfd240e8d40
-
SHA256
a8f873baff34362d2ec792dfcf4643edc39f30ab0f9a7f29bafb0ff1a1a6885e
-
SHA512
6fcf7469c23cf3afb7803f94cdbbc9194f2b57d28f5f79e5a7edd47eb3ba57bc05177a7adb9a50784a7947999e145c68d31770f3d6c65be237a8cc6f5876add1
-
SSDEEP
12288:34QSob3S04MinDXMGpKX8RbB68Bh4ichnv7q3bINJR32W:3yob3SAingPOrh4rnvm3G2W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a8f873baff34362d2ec792dfcf4643edc39f30ab0f9a7f29bafb0ff1a1a6885e
Files
-
a8f873baff34362d2ec792dfcf4643edc39f30ab0f9a7f29bafb0ff1a1a6885e.exe windows:4 windows x86
8711cccc009c78f85064f7aae5680b85
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
sendto
rasapi32
RasHangUpA
user32
ClientToScreen
gdi32
MoveToEx
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CoCreateInstance
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetIcon
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
CODE Size: 464KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE