Static task
static1
Behavioral task
behavioral1
Sample
4699bba02bfad3926cffe427d68c5307d3830317d4303ba580b11eb53c3b65bd.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4699bba02bfad3926cffe427d68c5307d3830317d4303ba580b11eb53c3b65bd.exe
Resource
win10v2004-20230915-en
General
-
Target
4699bba02bfad3926cffe427d68c5307d3830317d4303ba580b11eb53c3b65bd
-
Size
8.6MB
-
MD5
5947a05088eaebf0df06dfac89ebefe8
-
SHA1
0a4c8a1ce6ba109a2e4914fe0b989c00517ba8c8
-
SHA256
4699bba02bfad3926cffe427d68c5307d3830317d4303ba580b11eb53c3b65bd
-
SHA512
a051755b05cc92a7410b20f52e43ae319a6d6831def6b792ff89fa933490308acf5fd8215192f7b390397f76ddf6272c8257ee001d1f81f0326c9768d5edbb25
-
SSDEEP
196608:nI9/kDlMTC2e9JzZKOEUIu70Y7inHev6pBmb3H8OgX/cX:c/kDm4zMDluQYw7pBk3H/a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4699bba02bfad3926cffe427d68c5307d3830317d4303ba580b11eb53c3b65bd
Files
-
4699bba02bfad3926cffe427d68c5307d3830317d4303ba580b11eb53c3b65bd.exe windows:5 windows x86
387f84cc13884dfd1aed93c3aac88dc3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadImageW
gdi32
GetStockObject
msimg32
TransparentBlt
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
SHBrowseForFolderA
comctl32
InitCommonControlsEx
shlwapi
StrFormatKBSizeA
uxtheme
IsAppThemed
ole32
CoRegisterClassObject
oleaut32
VarBstrFromDate
oledlg
ord8
oleacc
LresultFromObject
gdiplus
GdipCreateFromHDC
imm32
ImmReleaseContext
winmm
PlaySoundA
Sections
.text Size: 8.5MB - Virtual size: 11.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE