Static task
static1
Behavioral task
behavioral1
Sample
863d6f81f477d136caeb8ec6e4f7df40d1c9b0a2997b88f65f15b0bcf5d7ec60.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
863d6f81f477d136caeb8ec6e4f7df40d1c9b0a2997b88f65f15b0bcf5d7ec60.exe
Resource
win10v2004-20230915-en
General
-
Target
863d6f81f477d136caeb8ec6e4f7df40d1c9b0a2997b88f65f15b0bcf5d7ec60
-
Size
13.2MB
-
MD5
b3735bce8d7593212a09d1828a5a8454
-
SHA1
30d64db3edce0c8292645e731ea55a6cfd8367d4
-
SHA256
863d6f81f477d136caeb8ec6e4f7df40d1c9b0a2997b88f65f15b0bcf5d7ec60
-
SHA512
aa186a69920c9fb0abb7abe890399c2f0edc4583bda4d3b7a1eb207981e00915d04e774d29beaac3186fd14115e937849b1e66d0311af8e8abdb60bce30402b2
-
SSDEEP
393216:KftdydeQm+E4egVNleJn57MmkL1MiN7g/Fql8R:K1dcPE4eUOn5zG1bAR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 863d6f81f477d136caeb8ec6e4f7df40d1c9b0a2997b88f65f15b0bcf5d7ec60
Files
-
863d6f81f477d136caeb8ec6e4f7df40d1c9b0a2997b88f65f15b0bcf5d7ec60.exe windows:4 windows x86
50a0bb035d76ea58a17b76c8913d8c00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
user32
OpenClipboard
gdi32
GetClipRgn
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
ioctlsocket
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 4.2MB - Virtual size: 4.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 13KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 420KB - Virtual size: 419KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE