Static task
static1
Behavioral task
behavioral1
Sample
0d075b07f4a4eff41c43da2daefbdd8c5db46ee3e1b22667c5c95415da2a3de9.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0d075b07f4a4eff41c43da2daefbdd8c5db46ee3e1b22667c5c95415da2a3de9.exe
Resource
win10v2004-20231020-en
General
-
Target
0d075b07f4a4eff41c43da2daefbdd8c5db46ee3e1b22667c5c95415da2a3de9
-
Size
8.4MB
-
MD5
5cd8dc0006d803809c5fe5d19e0e5763
-
SHA1
d69c0d1c46abd3a18fe44575b71c22e77af34304
-
SHA256
0d075b07f4a4eff41c43da2daefbdd8c5db46ee3e1b22667c5c95415da2a3de9
-
SHA512
18ddabac97aaa47928920ed55f5b647b8464dc84e9cbf1b01b76b5d5c4e509c02881c8ec0e524443bd0ec0e3fe6428619abc8cfd0dfc6af1f91038331c38f20d
-
SSDEEP
196608:X/38+NwwByCPzIR99AAJqGQ/lX9pllje/Nstlp6FeYR+L7IP5ybEU4TmAG:XP8+NwwByCPm9mf59flK+LlkWSU4CD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d075b07f4a4eff41c43da2daefbdd8c5db46ee3e1b22667c5c95415da2a3de9
Files
-
0d075b07f4a4eff41c43da2daefbdd8c5db46ee3e1b22667c5c95415da2a3de9.exe windows:4 windows x86
7d27bf45d5687d520f4596e31d7182a4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
LoadStringA
gdi32
SetMapMode
winmm
midiStreamRestart
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoTaskMemFree
oleaut32
VariantCopy
comctl32
ImageList_ReplaceIcon
oledlg
ord8
ws2_32
recv
Sections
.text Size: 4.6MB - Virtual size: 25.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE