Static task
static1
Behavioral task
behavioral1
Sample
9675d442f987b8224164fe8df5e182bc9a5204c8ed0fe9ec52ed75c232f27d17.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
9675d442f987b8224164fe8df5e182bc9a5204c8ed0fe9ec52ed75c232f27d17.exe
Resource
win10v2004-20231020-en
General
-
Target
9675d442f987b8224164fe8df5e182bc9a5204c8ed0fe9ec52ed75c232f27d17
-
Size
1.9MB
-
MD5
fce78c7cd001969819763c86671756f5
-
SHA1
f5542db5dcc41c539e9f492fa123d07188cb6561
-
SHA256
9675d442f987b8224164fe8df5e182bc9a5204c8ed0fe9ec52ed75c232f27d17
-
SHA512
66459e080c6c8cabab0078c4671c051f9d470d8a1f25bdab19e303e1eb878ab62dcb0bd6f32175241408debcf804f65083604565bb93ab1001d47e1dbd687238
-
SSDEEP
49152:jEi+MedWmJLOo+6CtC9eypZyvCHFJ52R4zST8xETDBxWSx:jARJLOoN/ywsR4GT8+TDnWSx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9675d442f987b8224164fe8df5e182bc9a5204c8ed0fe9ec52ed75c232f27d17
Files
-
9675d442f987b8224164fe8df5e182bc9a5204c8ed0fe9ec52ed75c232f27d17.exe windows:4 windows x86
4f7b53b8bcf4d4791011e39bcd39771f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
GetEnvironmentStrings
user32
GetDesktopWindow
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
LoadTypeLi
comctl32
_TrackMouseEvent
ws2_32
WSACleanup
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 592KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ