Static task
static1
Behavioral task
behavioral1
Sample
db5eb2d64d0163d234b8a3fbebaee38229e4f3512bc264a8789fd61494705f85.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
db5eb2d64d0163d234b8a3fbebaee38229e4f3512bc264a8789fd61494705f85.exe
Resource
win10v2004-20230915-en
General
-
Target
db5eb2d64d0163d234b8a3fbebaee38229e4f3512bc264a8789fd61494705f85
-
Size
12.9MB
-
MD5
e6bc1c20769e47a8a7c71cbb6f5b5cdc
-
SHA1
6330c4de5870b29110623d4518b89db8877b0168
-
SHA256
db5eb2d64d0163d234b8a3fbebaee38229e4f3512bc264a8789fd61494705f85
-
SHA512
75f18e5a44ad7c9be368e5dd9f1a21cb585a5b3bfcbbd223fe9d94796be97ab57686c776b4dac378579153f1967dfc4d868e8e57f4d12a4df6850d7bfc705d1a
-
SSDEEP
196608:zP0vnCUfayOMK48o+zenebpKpdqC7MRPOZ4DJ6sAJDHgXABA9PPa8uWnGqiD:zP0aU/O14R+zenegn57MfDbO9CR7G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource db5eb2d64d0163d234b8a3fbebaee38229e4f3512bc264a8789fd61494705f85
Files
-
db5eb2d64d0163d234b8a3fbebaee38229e4f3512bc264a8789fd61494705f85.exe windows:4 windows x86
6220223d81ded15780345b4457eba2bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiOutPrepareHeader
ws2_32
inet_ntoa
kernel32
SetFilePointer
user32
SetMenuItemBitmaps
gdi32
CreateSolidBrush
winspool.drv
ClosePrinter
comdlg32
ChooseColorA
advapi32
RegQueryValueA
shell32
SHBrowseForFolderA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetLBound
comctl32
ord17
wininet
InternetCloseHandle
Sections
.text Size: - Virtual size: 695KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 10KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 452KB - Virtual size: 449KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE