Static task
static1
Behavioral task
behavioral1
Sample
0a810f91a5514c131c771d66c95dcf12177e8d41613b44ac0325414953edcab1.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
0a810f91a5514c131c771d66c95dcf12177e8d41613b44ac0325414953edcab1.exe
Resource
win10v2004-20231020-en
General
-
Target
0a810f91a5514c131c771d66c95dcf12177e8d41613b44ac0325414953edcab1
-
Size
12.5MB
-
MD5
1bb86a947546aaf3f230fcb400fda760
-
SHA1
401ca38fb851215b99261c6d7ffb4bdf7b888efc
-
SHA256
0a810f91a5514c131c771d66c95dcf12177e8d41613b44ac0325414953edcab1
-
SHA512
99482f73a2c15754f67bc8d95c8c02081a7b101b73538ad6e4b5d8b56028acc52674a8ad847a2f9656e770cd1f8f280e62688e4e7831d1ea60213ac695ec8069
-
SSDEEP
196608:/WozL3/J5nVixibjWLaKpdqC7MRPOZMScMHpWe7ldMSCQfb/yTwvmGhRnCJx:R/JZcn57MBScopWe77MS9bowvFCJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a810f91a5514c131c771d66c95dcf12177e8d41613b44ac0325414953edcab1
Files
-
0a810f91a5514c131c771d66c95dcf12177e8d41613b44ac0325414953edcab1.exe windows:4 windows x86
64a2310644d6a1753963c212ddbdd19e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiOutPrepareHeader
ws2_32
inet_ntoa
kernel32
SetFilePointer
user32
SetMenuItemBitmaps
gdi32
CreateSolidBrush
winspool.drv
ClosePrinter
comdlg32
ChooseColorA
advapi32
RegQueryValueA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetLBound
comctl32
ord17
wininet
InternetCloseHandle
Sections
.text Size: - Virtual size: 686KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 396KB - Virtual size: 393KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE