Static task
static1
Behavioral task
behavioral1
Sample
01d0370bfe804af183013b7a11624585.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
01d0370bfe804af183013b7a11624585.exe
Resource
win10v2004-20230915-en
General
-
Target
01d0370bfe804af183013b7a11624585.exe
-
Size
11.0MB
-
MD5
01d0370bfe804af183013b7a11624585
-
SHA1
715de864665ba55b1b02cab7178dcef7afbcf38b
-
SHA256
6d45b6fbe1f6148d522a60302251cf2bc3e1a79cbf23e6a04310a316b164b37b
-
SHA512
2914adfbef0d831ee436ae3d6aadef82b62416705b96ab3742ea7d4342b2a9b788c12062f3011f4de93dfe4fedc8f929a8c5990e1fce04585dfd03e7686f1c82
-
SSDEEP
196608:KoGGyYGuynhOrVZgqSm5KpdqC7MRPOZA/+UR7QiuyKkYbuHA5v:KFGVynhOfgqwn57M9/TRiyKjbzB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01d0370bfe804af183013b7a11624585.exe
Files
-
01d0370bfe804af183013b7a11624585.exe.exe windows:4 windows x86
bdfd435852016ebf0849a8ed39b8e3c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
SetLastError
user32
SetMenu
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
DragAcceptFiles
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_Add
wininet
InternetCloseHandle
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 371KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 356KB - Virtual size: 354KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE