Static task
static1
Behavioral task
behavioral1
Sample
85a57bb3801c013526929c5a1733eb2a20354f02fdcdb878428b6ff519b0b21d.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
85a57bb3801c013526929c5a1733eb2a20354f02fdcdb878428b6ff519b0b21d.exe
Resource
win10v2004-20231020-en
General
-
Target
85a57bb3801c013526929c5a1733eb2a20354f02fdcdb878428b6ff519b0b21d
-
Size
7.9MB
-
MD5
e2c5d569f851209d7a8c5cffcf3cf082
-
SHA1
82b1c453494e0190d4b4c8a66c5663a0e0826288
-
SHA256
85a57bb3801c013526929c5a1733eb2a20354f02fdcdb878428b6ff519b0b21d
-
SHA512
a069b15eee09f25027adaf99c45b7a5012c531d981c4b2c8c7673ac88c09e7b2b28fd8be8cc169395aa75ef07c21ac11dd8eef70da03f18aea858da55d3fc100
-
SSDEEP
196608:TOc3ngwaOmuH3PHJeqslY64iKjkVgfakqgrox:TO4ghYfJe/74iKjk+fangEx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 85a57bb3801c013526929c5a1733eb2a20354f02fdcdb878428b6ff519b0b21d
Files
-
85a57bb3801c013526929c5a1733eb2a20354f02fdcdb878428b6ff519b0b21d.exe windows:4 windows x86 arch:x86
893f385cda57b5380769c4534d4e207b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
user32
GetDlgCtrlID
gdi32
ScaleWindowExtEx
msimg32
TransparentBlt
winspool.drv
DocumentPropertiesA
advapi32
CryptGetHashParam
shell32
SHGetSpecialFolderPathA
ole32
CoGetClassObject
oleaut32
SysAllocStringByteLen
comctl32
ImageList_GetImageInfo
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 7.1MB - Virtual size: 17.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 759KB - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ