Static task
static1
Behavioral task
behavioral1
Sample
0954be1a83c892de22db89f5f13081dc7e45a2c8f3c00ecc99cc0028d9c00313.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
0954be1a83c892de22db89f5f13081dc7e45a2c8f3c00ecc99cc0028d9c00313.exe
Resource
win10v2004-20230915-en
General
-
Target
0954be1a83c892de22db89f5f13081dc7e45a2c8f3c00ecc99cc0028d9c00313
-
Size
15.7MB
-
MD5
c8c42e2319acff2df378bf84f38f27bf
-
SHA1
34dbe8d99800a741072a5a1d6285b91a847e5f89
-
SHA256
0954be1a83c892de22db89f5f13081dc7e45a2c8f3c00ecc99cc0028d9c00313
-
SHA512
3553541e43b8bf0cd0bdc62318354231e97f4cf75b6720bec14904dc78157c066f95d29ef0f645dd832f9910b9549f5d98ff8565dd5875bd57ba0dd6e69db17a
-
SSDEEP
393216:Lm94rPuK/FSn57MF/XodlJj7ENwrYah8p662598:N6ISn5N7M0Yy7625
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0954be1a83c892de22db89f5f13081dc7e45a2c8f3c00ecc99cc0028d9c00313
Files
-
0954be1a83c892de22db89f5f13081dc7e45a2c8f3c00ecc99cc0028d9c00313.exe windows:4 windows x86
8bb75aa5226a7d22279ef4d3a131f50c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
send
kernel32
SetFilePointer
user32
DestroyAcceleratorTable
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 610KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 6.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 10KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 416KB - Virtual size: 413KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE