Static task
static1
Behavioral task
behavioral1
Sample
84a255ba7939d9c6e0400d95be6d7d66300dd56e82757bfce869ffa2c075f4d5.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
84a255ba7939d9c6e0400d95be6d7d66300dd56e82757bfce869ffa2c075f4d5.exe
Resource
win10v2004-20231023-en
General
-
Target
84a255ba7939d9c6e0400d95be6d7d66300dd56e82757bfce869ffa2c075f4d5
-
Size
15.6MB
-
MD5
bd87c6139f0012e8c3995886432dcb81
-
SHA1
5c9192dd9b05e247e9d261876a63fae0b99e20cb
-
SHA256
84a255ba7939d9c6e0400d95be6d7d66300dd56e82757bfce869ffa2c075f4d5
-
SHA512
d5f2198353a1bd0c6c5f8400feebc783ae2c221673d1d14b8ff5d985444ec5e6b1013f42a8b20045283d4748c84c1f25f2ad4b30b1c3bf03575d30c2d5952fa6
-
SSDEEP
393216:hNvzetbdS6RsOgiWwjkQulmg7n57Me8GuKJS1shkv3HAR92GgU:hNvISKsZiNQ/n5itKksSW92v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 84a255ba7939d9c6e0400d95be6d7d66300dd56e82757bfce869ffa2c075f4d5
Files
-
84a255ba7939d9c6e0400d95be6d7d66300dd56e82757bfce869ffa2c075f4d5.exe windows:4 windows x86 arch:x86
7e46d4e1a48fc9638fa3a8d8c05fe943
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
user32
LoadIconA
gdi32
GetTextMetricsA
winmm
waveOutUnprepareHeader
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
inet_ntoa
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 627KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 6.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 444KB - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE