Static task
static1
Behavioral task
behavioral1
Sample
9dec3a6d655be7b54fa0d4ec22bd5f51075acd8a10a0d2caa7821c7c441d598b.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
9dec3a6d655be7b54fa0d4ec22bd5f51075acd8a10a0d2caa7821c7c441d598b.exe
Resource
win10v2004-20231023-en
General
-
Target
9dec3a6d655be7b54fa0d4ec22bd5f51075acd8a10a0d2caa7821c7c441d598b
-
Size
10.4MB
-
MD5
f9ad4921376ec70b103b3c2bfc2bedd5
-
SHA1
f580882309e55cce50758a99bc2a56dcbfcfe5e2
-
SHA256
9dec3a6d655be7b54fa0d4ec22bd5f51075acd8a10a0d2caa7821c7c441d598b
-
SHA512
72b425907ae375806ab3375ad385dca4746931ef16c7bdb8d9e71e4cb01e52da405d32ddf028f17fe587d31b146605d2e5ce00893189287ba6e6ef0ce6eea34b
-
SSDEEP
196608:fSZZppuhZDJ1Cjw1CUp9BnbSqD3rCnx5IGtTx611bte4Kh8Z1WQg4b0mD:0ghZDJ1Cj0CObLD3unYGtI11xxKm1J7v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9dec3a6d655be7b54fa0d4ec22bd5f51075acd8a10a0d2caa7821c7c441d598b
Files
-
9dec3a6d655be7b54fa0d4ec22bd5f51075acd8a10a0d2caa7821c7c441d598b.exe windows:4 windows x86 arch:x86
6e602d2879f1359b4f218fefb19e4593
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
MapDialogRect
gdi32
SetViewportExtEx
winmm
midiStreamRestart
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoTaskMemFree
oleaut32
VariantCopy
comctl32
ImageList_ReplaceIcon
oledlg
ord8
ws2_32
recv
Sections
.text Size: 3.6MB - Virtual size: 24.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE