Static task
static1
Behavioral task
behavioral1
Sample
7c2e9c5658b41a3b94b4e0defa153da8c018eb5048597fb2bf0a8fd6af58c07a.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
7c2e9c5658b41a3b94b4e0defa153da8c018eb5048597fb2bf0a8fd6af58c07a.exe
Resource
win10v2004-20231023-en
General
-
Target
7c2e9c5658b41a3b94b4e0defa153da8c018eb5048597fb2bf0a8fd6af58c07a
-
Size
11.1MB
-
MD5
8e772fd8bf5ecb55790a4ccf8bce28e2
-
SHA1
ad667ec66460d742f513341c73d17389aefebd33
-
SHA256
7c2e9c5658b41a3b94b4e0defa153da8c018eb5048597fb2bf0a8fd6af58c07a
-
SHA512
906fb47a6e31748f66ea12e8c7f25d01b0e7ff7e9350e28dd737682435c3e390e39027758e3f991e291f01df06262a17d747b0fc014390d8a174193806750a9e
-
SSDEEP
196608:2VFK6tV9qku5JVcsR5mXZwbm+Jnp7lfeWGqTG4IEBs8A1UXSq9pbfrQnPKAyJVs:eY6tLqlzIXZem0lWWrBsxmiq95fiKAK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c2e9c5658b41a3b94b4e0defa153da8c018eb5048597fb2bf0a8fd6af58c07a
Files
-
7c2e9c5658b41a3b94b4e0defa153da8c018eb5048597fb2bf0a8fd6af58c07a.exe windows:5 windows x86
6bd0c0ba8a82d24f130b297b91a47ca0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
version
VerQueryValueA
rasapi32
RasGetConnectStatusA
kernel32
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetFocus
gdi32
PtVisible
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
VariantChangeType
comctl32
ImageList_Add
wininet
InternetCloseHandle
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 641KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 250KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. 7u Size: - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.(;6 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9P+ Size: 11.0MB - Virtual size: 11.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 36KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ