Static task
static1
Behavioral task
behavioral1
Sample
c6e5367c52a910cb3fa4ed61d452f9286e28746a1732f3ecb051749ca68ac444.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c6e5367c52a910cb3fa4ed61d452f9286e28746a1732f3ecb051749ca68ac444.exe
Resource
win10v2004-20230915-en
General
-
Target
c6e5367c52a910cb3fa4ed61d452f9286e28746a1732f3ecb051749ca68ac444
-
Size
2.7MB
-
MD5
a1e99b8e5d915677ff010e3edc21fe02
-
SHA1
585de17bd720bad3647c6f265e0b67fac9111508
-
SHA256
c6e5367c52a910cb3fa4ed61d452f9286e28746a1732f3ecb051749ca68ac444
-
SHA512
d65d739b66407c305aef4a8f9c74a90043fc49bacf16ff8affcf4603b4ad883ef73078816025540eee679b359be433010c06274eb4bcc49344352484f8d833d6
-
SSDEEP
49152:RIQCrX9fRlWu4EV29YAJ7ijMHKbfnWa9yORBPIUurvyveAMpCNIxe:RIQYXL7FsXHKbfnWaUORBQ73uIxe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c6e5367c52a910cb3fa4ed61d452f9286e28746a1732f3ecb051749ca68ac444
Files
-
c6e5367c52a910cb3fa4ed61d452f9286e28746a1732f3ecb051749ca68ac444.exe windows:4 windows x86
febbb17d5cd7b07bb940ef42f46f8de0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetSystemDirectoryA
user32
GetMenu
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Add
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.6MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1020KB - Virtual size: 1020KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ