_Scintilla_DirectFunction@16
Static task
static1
Behavioral task
behavioral1
Sample
9a799d84063de0838f49b92a0c1032e4cf03a5c9a1ece209c059d61f2b1aa73b.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9a799d84063de0838f49b92a0c1032e4cf03a5c9a1ece209c059d61f2b1aa73b.exe
Resource
win10v2004-20230915-en
General
-
Target
9a799d84063de0838f49b92a0c1032e4cf03a5c9a1ece209c059d61f2b1aa73b
-
Size
8.7MB
-
MD5
5c41cc770ce3f8b54d76d832e214a6ea
-
SHA1
25a7bcf3cab3ee63edbf1063042ba7a874ad6db2
-
SHA256
9a799d84063de0838f49b92a0c1032e4cf03a5c9a1ece209c059d61f2b1aa73b
-
SHA512
5ed147c912b55b734408bb92a539a62a567a93bf96432f85c249c62a0bb08f49cc04de7a97211b5f72961b2ae23697a54d7b94a38be6919c1b84f7ece331448b
-
SSDEEP
196608:kMyd4yitzWVgacV2Ce7S3JL27a6+MAYu5d:nydfsK6acQN02KY8d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a799d84063de0838f49b92a0c1032e4cf03a5c9a1ece209c059d61f2b1aa73b
Files
-
9a799d84063de0838f49b92a0c1032e4cf03a5c9a1ece209c059d61f2b1aa73b.exe windows:4 windows x86
e6679f1c2672f971ca25678fb5d0e505
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutPause
ws2_32
closesocket
version
VerLanguageNameA
rasapi32
RasHangUpA
kernel32
GetWindowsDirectoryA
user32
GetClassNameA
gdi32
ExcludeClipRect
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
SafeArrayUnaccessData
comctl32
ImageList_ReplaceIcon
imm32
ImmReleaseContext
wininet
InternetCanonicalizeUrlA
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Exports
Exports
Sections
.text Size: 6.0MB - Virtual size: 10.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ