Static task
static1
Behavioral task
behavioral1
Sample
72d1feebea4e06c85a31a826328483548e22e9a6669542a99dbf52a7895d3f6c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
72d1feebea4e06c85a31a826328483548e22e9a6669542a99dbf52a7895d3f6c.exe
Resource
win10v2004-20230915-en
General
-
Target
72d1feebea4e06c85a31a826328483548e22e9a6669542a99dbf52a7895d3f6c
-
Size
1.9MB
-
MD5
9cc7d85e2237b4b6b50b5f58cf6c44cf
-
SHA1
c8d6fd4e0266b01b44567cc3b08265407ba75096
-
SHA256
72d1feebea4e06c85a31a826328483548e22e9a6669542a99dbf52a7895d3f6c
-
SHA512
337c87f33ba196fca98979885975766e07565a8e3844f249f9cc8b6047fee666e5a007133efb38beed7be6b47b4c7ab4590d77e826f02ff660d825bcf34669ca
-
SSDEEP
24576:scvYuRPtm8ELlcAL7NpWEa0S1OAthA514kQti307wqWXyHSCYAM6X9IiZ0s8LWS:s/98WL7GEGfy514TtnRWZCYnu9I00BSS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72d1feebea4e06c85a31a826328483548e22e9a6669542a99dbf52a7895d3f6c
Files
-
72d1feebea4e06c85a31a826328483548e22e9a6669542a99dbf52a7895d3f6c.exe windows:4 windows x86
f9f31d2046eab9184c1773e9daa29304
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
closesocket
kernel32
OpenProcess
user32
GetActiveWindow
gdi32
Escape
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 500KB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 368KB - Virtual size: 368KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ