Static task
static1
Behavioral task
behavioral1
Sample
d785fcd5a1bf48c0dabc118d18b950f9c72fdaba38ed74be2db3b622602afab2.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
d785fcd5a1bf48c0dabc118d18b950f9c72fdaba38ed74be2db3b622602afab2.exe
Resource
win10v2004-20231025-en
General
-
Target
d785fcd5a1bf48c0dabc118d18b950f9c72fdaba38ed74be2db3b622602afab2
-
Size
15.1MB
-
MD5
31bc08cb2b5ec172bed36cdc06640c3f
-
SHA1
1b11c9bfbbae5ccaeda4cd1fa20954cb8ae8c60e
-
SHA256
d785fcd5a1bf48c0dabc118d18b950f9c72fdaba38ed74be2db3b622602afab2
-
SHA512
878e8aa00caffc16d6ba725345449ab40d8f9c9d9e3442343aca2cb2df06668f89d63bcf4b25ceba7ccd75b536806c60d5ec7f1485ed0db4ed0382bb578170f4
-
SSDEEP
393216:LgtB/MHzBPL6jLN60k2EYgzrP5wQi2nUdAtkrn:Ly/MJ2L029MrP5I2Rt0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d785fcd5a1bf48c0dabc118d18b950f9c72fdaba38ed74be2db3b622602afab2
Files
-
d785fcd5a1bf48c0dabc118d18b950f9c72fdaba38ed74be2db3b622602afab2.exe windows:4 windows x86 arch:x86
62b9eb421eacd39d910f37c36f2c75e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutReset
ws2_32
socket
rasapi32
RasGetConnectStatusA
kernel32
GetWindowsDirectoryA
user32
ScrollWindowEx
gdi32
CreateFontIndirectA
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetDim
comctl32
ImageList_Draw
wldap32
ord29
wsock32
shutdown
wininet
InternetCloseHandle
Sections
.text Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 7.9MB - Virtual size: 7.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 416KB - Virtual size: 415KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE