Static task
static1
Behavioral task
behavioral1
Sample
955379161657577eb55fa33fac7113e5f4e53a635dd368b67e7a023a5dbfe083.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
955379161657577eb55fa33fac7113e5f4e53a635dd368b67e7a023a5dbfe083.exe
Resource
win10v2004-20231020-en
General
-
Target
955379161657577eb55fa33fac7113e5f4e53a635dd368b67e7a023a5dbfe083
-
Size
6.4MB
-
MD5
fe82c614ea8edcaf2e46fa2d18497db3
-
SHA1
7587644d105182776007dec845dd8270614a4a19
-
SHA256
955379161657577eb55fa33fac7113e5f4e53a635dd368b67e7a023a5dbfe083
-
SHA512
72ef419ee882185ed1d98da4c62e5f10b66fe9751af15e9c03a8e8cc615c54c7b5f6452fd3352b7084b1f13ba90ed3b458e89a002836ba11e9714419f88452b6
-
SSDEEP
196608:mEoVuDyB5/tyMgv4kCAOV6hjj94MVKBoiA+V:mTVuWn/tzgLCAOV6tjhKSsV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 955379161657577eb55fa33fac7113e5f4e53a635dd368b67e7a023a5dbfe083
Files
-
955379161657577eb55fa33fac7113e5f4e53a635dd368b67e7a023a5dbfe083.exe windows:4 windows x86
098c5b95418d777b914d9b643df14abe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
midiStreamOpen
ws2_32
gethostbyname
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
rasapi32
RasGetConnectStatusA
kernel32
GetCurrentProcess
user32
ScrollWindowEx
gdi32
Escape
winspool.drv
OpenPrinterA
comdlg32
GetOpenFileNameW
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
LHashValOfNameSys
comctl32
ImageList_Read
wldap32
ord29
wininet
InternetOpenA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 5.4MB - Virtual size: 10.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ