Static task
static1
Behavioral task
behavioral1
Sample
4640296a92a02b9a3d2a074d888f5bf3d8a0c4582a9bc312804e7a7d14833a7c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
4640296a92a02b9a3d2a074d888f5bf3d8a0c4582a9bc312804e7a7d14833a7c.exe
Resource
win10v2004-20230915-en
General
-
Target
4640296a92a02b9a3d2a074d888f5bf3d8a0c4582a9bc312804e7a7d14833a7c
-
Size
11.2MB
-
MD5
60ea67ccad324080b9847f2bb3c4c5ef
-
SHA1
5b804c72496d3346b0228a7872173955410daf58
-
SHA256
4640296a92a02b9a3d2a074d888f5bf3d8a0c4582a9bc312804e7a7d14833a7c
-
SHA512
4032752ec572592cece2edc016db50e34d0dc6c33e2521e085bdbc0c4bba88afc0e01a94972390ef3d792e5ce4cce2895eacea62072730eb2b9e9503d1f10b8a
-
SSDEEP
196608:6H/Iwaa720QJfgydfMNRUUMc8HVr0IMw1VPbHxrC/fJ7UOe7pcFJ3z+zDXI2GsHk:+ns0NWc8HZ1JFKfS7OHyvXPQ6hB+Ydo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4640296a92a02b9a3d2a074d888f5bf3d8a0c4582a9bc312804e7a7d14833a7c
Files
-
4640296a92a02b9a3d2a074d888f5bf3d8a0c4582a9bc312804e7a7d14833a7c.exe windows:4 windows x86
fe41757e248c1b9c6a4608816b1d662a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
EnumResourceNamesA
user32
ShowWindow
gdi32
LineTo
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ImageList_ReplaceIcon
wininet
InternetCloseHandle
comdlg32
ChooseFontA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 10.4MB - Virtual size: 17.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 728KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ