Static task
static1
Behavioral task
behavioral1
Sample
33a87cc82d97b235ff8b4ae2b459e0e37d62cd7a39f8f3eb3d74c286b3be0eda.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
33a87cc82d97b235ff8b4ae2b459e0e37d62cd7a39f8f3eb3d74c286b3be0eda.exe
Resource
win10v2004-20230915-en
General
-
Target
33a87cc82d97b235ff8b4ae2b459e0e37d62cd7a39f8f3eb3d74c286b3be0eda
-
Size
641KB
-
MD5
5a5aa46a6c0f953d49e7117815bd4aff
-
SHA1
6280f284d157c9bb74f590c11b8ebf700d6cf041
-
SHA256
33a87cc82d97b235ff8b4ae2b459e0e37d62cd7a39f8f3eb3d74c286b3be0eda
-
SHA512
d78e5949fbc120ae7ca5b4318bb83be2e094e8679760e262394809516ef4d5b6ec0ea1510fa741899081d6e574a21a5e95a3a1f966da051958e54b8b86e64b43
-
SSDEEP
12288:03hjHidxgGeN9wyqW+JgMplBaKSkxS5ylfNnLf8F9xo3LrNPFSnapMqbxDQ:ojKxglCW+JgMpP+kxS5y3nATxodInGLD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33a87cc82d97b235ff8b4ae2b459e0e37d62cd7a39f8f3eb3d74c286b3be0eda
Files
-
33a87cc82d97b235ff8b4ae2b459e0e37d62cd7a39f8f3eb3d74c286b3be0eda.exe windows:4 windows x86
a0283cb4aef390a1b88cfe5888124ca6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
accountactivate
ord1
advapi32
AdjustTokenPrivileges
comctl32
ImageList_Create
comdlg32
PrintDlgA
gdi32
SetTextColor
iphlpapi
GetAdaptersInfo
itextout
xeDrawText
kpic10
KPIC_LoadPictureResource
normgrab
CleanupHookDll
ole32
CoTaskMemAlloc
oleaut32
SafeArrayGetElement
oledlg
ord8
olepro32
ord253
psapi
EnumProcessModules
shell32
ExtractIconA
statistics
Statistics_Online
tottsengine50
eTTSFirstVoice
user32
IsDialogMessageA
version
GetFileVersionInfoA
wininet
InternetGetLastResponseInfoA
winmm
PlaySoundA
winspool.drv
DocumentPropertiesA
wsock32
closesocket
xfile
CF_LoadFile
Sections
.text Size: 596KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE