Static task
static1
Behavioral task
behavioral1
Sample
047ee29e361ece70a0f4768f3737d6b4cf9cb3614286bfe1e0f151c68265aed6.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
047ee29e361ece70a0f4768f3737d6b4cf9cb3614286bfe1e0f151c68265aed6.exe
Resource
win10v2004-20230915-en
General
-
Target
047ee29e361ece70a0f4768f3737d6b4cf9cb3614286bfe1e0f151c68265aed6
-
Size
2.7MB
-
MD5
bac95cc17c478297813deba769f176f6
-
SHA1
afcf9d47af906754a13ebb43242aba7aba32a526
-
SHA256
047ee29e361ece70a0f4768f3737d6b4cf9cb3614286bfe1e0f151c68265aed6
-
SHA512
4b5468e4d3dd0393ba40995b2a06270952b9682e10fe6ae08beefe04fddf6cf67d466fa633df96340af8756a4fe34e56010ae18209c9b42d42dfa79c98f98806
-
SSDEEP
49152:B5e5DP9CRBK2mJbkXbRONFm7ujdJI+sGsh+JxXKt:B5yDlCTKOtO3cujNs9h+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 047ee29e361ece70a0f4768f3737d6b4cf9cb3614286bfe1e0f151c68265aed6
Files
-
047ee29e361ece70a0f4768f3737d6b4cf9cb3614286bfe1e0f151c68265aed6.exe windows:4 windows x86
514051f9209ac3beb44a49b2c83b90cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
winmm
midiOutReset
ws2_32
ntohl
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
user32
LoadStringA
gdi32
GetROP2
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
SafeArrayUnaccessData
comctl32
ImageList_AddMasked
secur32
GetUserNameExA
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 4.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mapo Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE