Static task
static1
Behavioral task
behavioral1
Sample
369722fda1c8949422798cd63054de302a49f87ae2d1e33d82d729b8379c6cee.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
369722fda1c8949422798cd63054de302a49f87ae2d1e33d82d729b8379c6cee.exe
Resource
win10v2004-20231023-en
General
-
Target
369722fda1c8949422798cd63054de302a49f87ae2d1e33d82d729b8379c6cee
-
Size
8.0MB
-
MD5
ab23cf368d590c2966b1bf52c2ba4fa6
-
SHA1
d7811409c4bb0de71ea0344ab3f1116b6d864687
-
SHA256
369722fda1c8949422798cd63054de302a49f87ae2d1e33d82d729b8379c6cee
-
SHA512
97d451ac5f743b39416b36d6ba0062375f546a7145562e1f55a5aea7817d2c510b2faabcdcd10f02a65a110cf34d839972d4a4e18e9946a5f10d9b1fd5293a5b
-
SSDEEP
196608:y9M8XsBD93eDhbgpXYkCTOZ2mpd/X/c3O9AsNNRiWwFcinSRgVSG:E1sBD93oVgUcd/X03O9AsDRiWwFBtSG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 369722fda1c8949422798cd63054de302a49f87ae2d1e33d82d729b8379c6cee
Files
-
369722fda1c8949422798cd63054de302a49f87ae2d1e33d82d729b8379c6cee.exe windows:5 windows x86
0533721e966623236191ba059fb834b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
OpenClipboard
CharUpperBuffW
gdi32
SelectPalette
winmm
waveOutRestart
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
OleRun
oleaut32
VariantClear
comctl32
ord17
ws2_32
WSAAsyncSelect
wininet
InternetCloseHandle
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 719KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 101KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 305KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.k]V Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.6=O Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.I\J Size: 7.9MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 168KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ