Static task
static1
Behavioral task
behavioral1
Sample
182c51e4332f32fdd71f668a8949e3948b3a911e36b07fa4b1fb9f7bb1724ebd.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
182c51e4332f32fdd71f668a8949e3948b3a911e36b07fa4b1fb9f7bb1724ebd.exe
Resource
win10v2004-20231025-en
General
-
Target
182c51e4332f32fdd71f668a8949e3948b3a911e36b07fa4b1fb9f7bb1724ebd
-
Size
1.2MB
-
MD5
3f538d42e4769d93cff67e952967c778
-
SHA1
2001de299d885288b8ded885b60a39b311ebfe55
-
SHA256
182c51e4332f32fdd71f668a8949e3948b3a911e36b07fa4b1fb9f7bb1724ebd
-
SHA512
67a1e799056f5a2514bd10ac52b58bd5c3bc285960b1e4bdb6323576f290e30a764b513778160c21c7f7faa5285dc26877ca782ec9308c0dca46fe09652f1758
-
SSDEEP
24576:nwNYmOlh2ONtmlY+yiz2l22PzW0/LgZJgdyHNt:n/mOlgu9iJZMLcJD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 182c51e4332f32fdd71f668a8949e3948b3a911e36b07fa4b1fb9f7bb1724ebd
Files
-
182c51e4332f32fdd71f668a8949e3948b3a911e36b07fa4b1fb9f7bb1724ebd.exe windows:4 windows x86
af6bbc357646cd2f6855afed90b020c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
midiStreamOut
ws2_32
WSACleanup
user32
GetMessagePos
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: 1.2MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE