Static task
static1
Behavioral task
behavioral1
Sample
9e85ca4c6a1cdfc965edec40540c34914ce7431b488f8dd715dadfe13a3313ea.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
9e85ca4c6a1cdfc965edec40540c34914ce7431b488f8dd715dadfe13a3313ea.exe
Resource
win10v2004-20231023-en
General
-
Target
9e85ca4c6a1cdfc965edec40540c34914ce7431b488f8dd715dadfe13a3313ea
-
Size
15.5MB
-
MD5
9167d9e32caac62412ee2b53997058be
-
SHA1
dafdd0c37231e15cff718cf5212bb7f969339943
-
SHA256
9e85ca4c6a1cdfc965edec40540c34914ce7431b488f8dd715dadfe13a3313ea
-
SHA512
0311cf195139929f0e5aa4487318699ceebd69101f1a2aaa69df8a404034445e39ea52a8da9e02c8ef9ab2c7f83680883d2fe9dcbb9e65a1b5e77dbed3ac250d
-
SSDEEP
393216:umbPVyojKf2tO6qArSBwLrULi/RpNBfJ3hD2tcl:uityojC2tpqAgwLwLi/rPfJxaS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9e85ca4c6a1cdfc965edec40540c34914ce7431b488f8dd715dadfe13a3313ea
Files
-
9e85ca4c6a1cdfc965edec40540c34914ce7431b488f8dd715dadfe13a3313ea.exe windows:5 windows x86 arch:x86
0f13807fba068d91ae67e821db9a6b99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
kernel32
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CreateWindowExA
advapi32
CryptGetKeyParam
shell32
DragAcceptFiles
ole32
CoUninitialize
gdi32
GetDeviceCaps
shlwapi
PathFindExtensionA
wininet
InternetTimeToSystemTime
oleaut32
SafeArrayAllocData
winhttp
WinHttpAddRequestHeaders
iphlpapi
GetPerAdapterInfo
msvcrt
free
comctl32
ImageList_BeginDrag
Sections
.text Size: - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmps0 Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmps1 Size: - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmps2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmps3 Size: 15.4MB - Virtual size: 15.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ