Static task
static1
Behavioral task
behavioral1
Sample
5042b901544af4fdf61ecb8c45ff622c1e63977ec52079418959868ceb8945ce.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
5042b901544af4fdf61ecb8c45ff622c1e63977ec52079418959868ceb8945ce.exe
Resource
win10v2004-20231023-en
General
-
Target
5042b901544af4fdf61ecb8c45ff622c1e63977ec52079418959868ceb8945ce
-
Size
7.0MB
-
MD5
e3cf10a363dcb0675293db3851fbc827
-
SHA1
37df90710dccd3cca5f0c6e60925368625055eb4
-
SHA256
5042b901544af4fdf61ecb8c45ff622c1e63977ec52079418959868ceb8945ce
-
SHA512
21efccd7455ccff1b76fa63c5de48d3422703f64cad21425710d6875a8eb1d040cfda88a578423bc126fdaff2a91ff88e3befb429f74ac0d3f2b1ef1b5bfd045
-
SSDEEP
98304:cGjdu3w6JzOcB3fam0bU3WvpHhPNlH3tUvkiipUczqiSsLF4dZy5Hk:cGjdu3wVU3NqVplHCIOVa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5042b901544af4fdf61ecb8c45ff622c1e63977ec52079418959868ceb8945ce
Files
-
5042b901544af4fdf61ecb8c45ff622c1e63977ec52079418959868ceb8945ce.exe windows:4 windows x86 arch:x86
79fb838054383e0a4b098f69948c8415
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutUnprepareHeader
ws2_32
accept
rasapi32
RasGetConnectStatusA
kernel32
MultiByteToWideChar
user32
wsprintfA
gdi32
RectVisible
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
DragQueryFileA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayGetElement
comctl32
ImageList_Add
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
GetOpenFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mtmd Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mtmd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ