Static task
static1
Behavioral task
behavioral1
Sample
3608e04657e62ce9a3954dfb040871e0a4572045c479f02a4e667ed2ff38f20c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
3608e04657e62ce9a3954dfb040871e0a4572045c479f02a4e667ed2ff38f20c.exe
Resource
win10v2004-20230915-en
General
-
Target
3608e04657e62ce9a3954dfb040871e0a4572045c479f02a4e667ed2ff38f20c
-
Size
2.9MB
-
MD5
da42a6d2fd06368efb5e31e6551fb4fb
-
SHA1
e8bb9a88db6857800ea946662550d46742ca92bc
-
SHA256
3608e04657e62ce9a3954dfb040871e0a4572045c479f02a4e667ed2ff38f20c
-
SHA512
cec298a4faea0dce425738a1a1e40b6f2ee5193f35a951511ad46641f8204d5b6b8c8ad9170e143d539de36d921895dc4d0f4a1d3256a5fde496f1033bc6d15e
-
SSDEEP
49152:TXHCx1wpw0BJh/uJRAmJgpQHzVhn+TKh0Qni2ZzfO14n+7TTp3bpgfabZ:TX0w6oH/uvAmIGzr+TKSQtRfey2FKybZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3608e04657e62ce9a3954dfb040871e0a4572045c479f02a4e667ed2ff38f20c
Files
-
3608e04657e62ce9a3954dfb040871e0a4572045c479f02a4e667ed2ff38f20c.exe windows:4 windows x86
0588d8566c0247a3cb74d141000b8a37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiOutReset
ws2_32
WSACleanup
user32
ScrollWindowEx
gdi32
GetObjectA
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoRevokeClassObject
oleaut32
SafeArrayGetLBound
comctl32
ImageList_Destroy
oledlg
ord8
Sections
.text Size: 2.8MB - Virtual size: 6.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE