Static task
static1
Behavioral task
behavioral1
Sample
d10a798c296983f23afb3e91f4394aee8c85e40c16f2da279a094841084a4437.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
d10a798c296983f23afb3e91f4394aee8c85e40c16f2da279a094841084a4437.exe
Resource
win10v2004-20230915-en
General
-
Target
d10a798c296983f23afb3e91f4394aee8c85e40c16f2da279a094841084a4437
-
Size
6.8MB
-
MD5
894af941be6373c821b7b82ca545a282
-
SHA1
f080b834af15e77e62970e17e8acdd21f4706659
-
SHA256
d10a798c296983f23afb3e91f4394aee8c85e40c16f2da279a094841084a4437
-
SHA512
cbce0d6c0d934c735d627db72faeada7ecc120d82c4fdba2d3e32e0839a369a5da3e36677eb12b548c0f874a88078616e68859bb6e4b3aad25762a83dcf7da51
-
SSDEEP
196608:RGQZtv8rHgILqvBuUT9WOo6vLJxmGtLopStCZ:RLODbLqvPfokLNtEACZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d10a798c296983f23afb3e91f4394aee8c85e40c16f2da279a094841084a4437
Files
-
d10a798c296983f23afb3e91f4394aee8c85e40c16f2da279a094841084a4437.exe windows:5 windows x86
bab6088e844a5bc8edc127efe403cb74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetActiveWindow
CharUpperBuffW
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantInit
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 751KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 394KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. &q Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.9m6 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.W-n Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 188KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ