Static task
static1
Behavioral task
behavioral1
Sample
da84d2259b2bd2443fc259a5727cd0d6d02d818b103285db4419b596b47e231b.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
da84d2259b2bd2443fc259a5727cd0d6d02d818b103285db4419b596b47e231b.exe
Resource
win10v2004-20231025-en
General
-
Target
da84d2259b2bd2443fc259a5727cd0d6d02d818b103285db4419b596b47e231b
-
Size
13.3MB
-
MD5
5f901a734edef7f987040b37176393cc
-
SHA1
74cd37c9b5349b1775ed0737eb036763e83a8a87
-
SHA256
da84d2259b2bd2443fc259a5727cd0d6d02d818b103285db4419b596b47e231b
-
SHA512
c7fe76ac08f565e682110eb6fb75ac5c0a7f8190c8cadd1f4ac107a27007e410c9ab8886e3bc8f601849624fbc63955bde8a2c75ca3c4d65948fe5c71d8d3bfe
-
SSDEEP
393216:euZQiqCjlwXj07ftjX/PJ0Zd9UM8CHAEtWsPnfr:3tqLXjWtjX3JudiOYur
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da84d2259b2bd2443fc259a5727cd0d6d02d818b103285db4419b596b47e231b
Files
-
da84d2259b2bd2443fc259a5727cd0d6d02d818b103285db4419b596b47e231b.exe windows:4 windows x86
722faccb25d3c0d7af703ef73bc2a1bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
rasapi32
RasGetConnectStatusA
winmm
waveOutRestart
ws2_32
inet_ntoa
kernel32
FileTimeToLocalFileTime
user32
LoadStringA
gdi32
GetStockObject
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
ChooseColorA
advapi32
RegQueryValueA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
oleaut32
SafeArrayUnaccessData
comctl32
ImageList_Create
wldap32
ord29
wininet
InternetCloseHandle
Sections
.text Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 601KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 3.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 11KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 392KB - Virtual size: 391KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE