Static task
static1
Behavioral task
behavioral1
Sample
649b5a497042dfdc32b42f85c7620f3dfcddb96471616a99ac84cb4ef5f3e535.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
649b5a497042dfdc32b42f85c7620f3dfcddb96471616a99ac84cb4ef5f3e535.exe
Resource
win10v2004-20231020-en
General
-
Target
649b5a497042dfdc32b42f85c7620f3dfcddb96471616a99ac84cb4ef5f3e535
-
Size
15.6MB
-
MD5
5abe5d63d9de10d4bc819b6c77e90d77
-
SHA1
9eb6a6afc185655e457133fd24f56332516f5514
-
SHA256
649b5a497042dfdc32b42f85c7620f3dfcddb96471616a99ac84cb4ef5f3e535
-
SHA512
f34326ba0e031d0eb6c0ee8a5e157796bc9b0bbc58673f7d0b7843e61944086b39ba80d3b632cf96fb268d717a544d3bb9aba01aae2a95b9c238e094f8de1de0
-
SSDEEP
393216:scsTKYbY+NSh53rUxggFbn57MnoQz/oK6MzOgr/Qtlak5:vOTbYx57Ubn5DAzZzVr/Qtd5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 649b5a497042dfdc32b42f85c7620f3dfcddb96471616a99ac84cb4ef5f3e535
Files
-
649b5a497042dfdc32b42f85c7620f3dfcddb96471616a99ac84cb4ef5f3e535.exe windows:4 windows x86 arch:x86
63575451ec894be7787f2c892ba99d71
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiStreamProperty
ws2_32
WSACleanup
kernel32
SetFilePointer
user32
SetForegroundWindow
gdi32
ExtSelectClipRgn
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
wininet
InternetCloseHandle
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 555KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 317KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 404KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 6.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 6.6MB - Virtual size: 6.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 428KB - Virtual size: 426KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE