Static task
static1
Behavioral task
behavioral1
Sample
4db6e8f21d30da63d6d1b2aa74177d0afb71e1ab592d1d264496f11f8c6e4865.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4db6e8f21d30da63d6d1b2aa74177d0afb71e1ab592d1d264496f11f8c6e4865.exe
Resource
win10v2004-20230915-en
General
-
Target
4db6e8f21d30da63d6d1b2aa74177d0afb71e1ab592d1d264496f11f8c6e4865
-
Size
5.3MB
-
MD5
cd6e9be3f48fa33e3260b4b1c1bb2d5c
-
SHA1
3a585fbfd041d067979e47e7fb0ac95d7f500735
-
SHA256
4db6e8f21d30da63d6d1b2aa74177d0afb71e1ab592d1d264496f11f8c6e4865
-
SHA512
3059d532691ae71cc0e545edd4ee57d1bfa90b4a7704ecdb0d58c735e2cf86294a70c8a3818b1d09c3e2d1b224a2f5a55c82fc8585aee5eaa1052ffb7d1dd0fe
-
SSDEEP
98304:Pa7/s75R4wxOoTgvYf6rDdoT2o6L27NvOsLyrgAx2gpf:97hMocG6rDdRo6LIUQyrIg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4db6e8f21d30da63d6d1b2aa74177d0afb71e1ab592d1d264496f11f8c6e4865
Files
-
4db6e8f21d30da63d6d1b2aa74177d0afb71e1ab592d1d264496f11f8c6e4865.exe windows:4 windows x86
f2abb6955bdf0d2157bb1bc93811fe9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
user32
GetMenuItemCount
gdi32
SelectPalette
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
recvfrom
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.4MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE