Static task
static1
Behavioral task
behavioral1
Sample
95707156b43971c30f7d80e958873a1e7d58fd87b94bfa9f4b3526dc765f6218.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
95707156b43971c30f7d80e958873a1e7d58fd87b94bfa9f4b3526dc765f6218.exe
Resource
win10v2004-20231023-en
General
-
Target
95707156b43971c30f7d80e958873a1e7d58fd87b94bfa9f4b3526dc765f6218
-
Size
13.0MB
-
MD5
52de97d757b9d129a3fe1b3b6eed7631
-
SHA1
064d0a1f8cd3cb5ca108ba0c5aa6540a98a11e0b
-
SHA256
95707156b43971c30f7d80e958873a1e7d58fd87b94bfa9f4b3526dc765f6218
-
SHA512
722ede378424a121998f1d997f9d1054f85e07fc39af16256f5315e71229051fc386a0ef1f0bf50e0f492f9bdd09812fb50aceb2d55f8c7ceb83187dc86da18d
-
SSDEEP
393216:QuN+M1+1LhZClvoOh2flNFypamiMNyy/0:Qu8MiE29aVsy8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95707156b43971c30f7d80e958873a1e7d58fd87b94bfa9f4b3526dc765f6218
Files
-
95707156b43971c30f7d80e958873a1e7d58fd87b94bfa9f4b3526dc765f6218.exe windows:6 windows x86
a7d154b59eeecbf8519595d428e876a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStringToAddressW
kernel32
GetVersionExW
user32
MessageBoxW
advapi32
CryptCreateHash
ole32
OleLockRunning
shlwapi
StrCmpW
gdiplus
GdipFree
winmm
PlaySoundW
bcrypt
BCryptDestroyHash
winhttp
WinHttpSetCredentials
crypt32
CertFreeCertificateChain
gdi32
GetDeviceCaps
shell32
DragQueryFileW
oleaut32
SysAllocString
comctl32
InitCommonControlsEx
imm32
ImmGetContext
Sections
.text Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 186KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.}uQ Size: - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.3[ Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.:YR Size: 12.9MB - Virtual size: 12.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ