Static task
static1
Behavioral task
behavioral1
Sample
67fe51c5ef16ac759f0df5209952badc3907afafd648dda7f90066fbbfea7103.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
67fe51c5ef16ac759f0df5209952badc3907afafd648dda7f90066fbbfea7103.exe
Resource
win10v2004-20231020-en
General
-
Target
67fe51c5ef16ac759f0df5209952badc3907afafd648dda7f90066fbbfea7103
-
Size
6.8MB
-
MD5
83aa225e9373b7a6f4e96eef4a958196
-
SHA1
c36f97d006f2374459f7bdbac855537d260658ce
-
SHA256
67fe51c5ef16ac759f0df5209952badc3907afafd648dda7f90066fbbfea7103
-
SHA512
39fc6cdb62ae7831699f58bbee4395d80ec3443bc77d7bc5a43958d4b19485bf0054b7f1aae2e4ce7173a07846e4d1173849ec168a4b85fa8b09958a88e2f52a
-
SSDEEP
98304:SLgDULcERT3meGI9Kqzmunn1/K46kj5g8b46ScV5+0iYB0/mE8ZlRzX38v6o3Y1T:SUgnkqj/p6k1Jb4jiEYB0/elRTe9I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67fe51c5ef16ac759f0df5209952badc3907afafd648dda7f90066fbbfea7103
Files
-
67fe51c5ef16ac759f0df5209952badc3907afafd648dda7f90066fbbfea7103.exe windows:5 windows x86
cb5edc3bbb49c982a4e4c4a409cdf2b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
GetVersionExA
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
OpenClipboard
gdi32
SelectPalette
winmm
waveOutRestart
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
OleRun
oleaut32
VariantClear
comctl32
ord17
ws2_32
WSAAsyncSelect
wininet
InternetCloseHandle
comdlg32
ChooseColorA
Sections
T-VMP Size: - Virtual size: 719KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 548KB - Virtual size: 547KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ