Static task
static1
Behavioral task
behavioral1
Sample
f6f29e354bd1954c20afb06908d5eb2f622de0650b583e4671913650dfe91a9f.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f6f29e354bd1954c20afb06908d5eb2f622de0650b583e4671913650dfe91a9f.exe
Resource
win10v2004-20231020-en
General
-
Target
f6f29e354bd1954c20afb06908d5eb2f622de0650b583e4671913650dfe91a9f
-
Size
1.8MB
-
MD5
38af9c3fb0d4b2273f5b4135f940a9ff
-
SHA1
45922ba32b4b472dee1ded8ba40e154e02fc79fb
-
SHA256
f6f29e354bd1954c20afb06908d5eb2f622de0650b583e4671913650dfe91a9f
-
SHA512
a9c6ba68eac80f879ff8d04bb7772c762f2d564cea027a8e2cf3427ddb1f735dae87936de8282a4ca806b2e11113f4dfb984d923c009cfc5d1a8268efbc8e0f7
-
SSDEEP
49152:G/WHoJs5HTrJHkWO8iaE5hoHDNrK2RCFFW9OMTq43Q:GeHoJoREWJLE5ajNrK2EFWHQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6f29e354bd1954c20afb06908d5eb2f622de0650b583e4671913650dfe91a9f
Files
-
f6f29e354bd1954c20afb06908d5eb2f622de0650b583e4671913650dfe91a9f.exe windows:4 windows x86
d9aff5348305e0714dd063be0939b0ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamClose
ws2_32
ntohl
kernel32
SetLastError
user32
ScrollWindowEx
gdi32
RoundRect
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
SafeArrayDestroy
comctl32
ord17
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 760KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1016KB - Virtual size: 1016KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ