Static task
static1
Behavioral task
behavioral1
Sample
83403ab25431c76a7ddbe00e75c26a42f5a8f554dc822d849c2d05a851ca2229.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
83403ab25431c76a7ddbe00e75c26a42f5a8f554dc822d849c2d05a851ca2229.exe
Resource
win10v2004-20231020-en
General
-
Target
83403ab25431c76a7ddbe00e75c26a42f5a8f554dc822d849c2d05a851ca2229
-
Size
15.5MB
-
MD5
289746c7bf18bf773a599efea4f237c1
-
SHA1
9434d7ee0a7d8483943bc63b40bb51fa7fedc44e
-
SHA256
83403ab25431c76a7ddbe00e75c26a42f5a8f554dc822d849c2d05a851ca2229
-
SHA512
195b68465aed96bee4e37ed9d9795128dabb877eb672dcb047a800279d6ef4ddeb6c023f51346c7b6fbbd2241fd85c512cea8328d0bd7eb81856054e0322525f
-
SSDEEP
393216:umbPVyojKf2tO6qArSBwLrULi/RpNBfJ3hD2tc0:uityojC2tpqAgwLwLi/rPfJxaL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83403ab25431c76a7ddbe00e75c26a42f5a8f554dc822d849c2d05a851ca2229
Files
-
83403ab25431c76a7ddbe00e75c26a42f5a8f554dc822d849c2d05a851ca2229.exe windows:5 windows x86 arch:x86
0f13807fba068d91ae67e821db9a6b99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
kernel32
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CreateWindowExA
advapi32
CryptGetKeyParam
shell32
DragAcceptFiles
ole32
CoUninitialize
gdi32
GetDeviceCaps
shlwapi
PathFindExtensionA
wininet
InternetTimeToSystemTime
oleaut32
SafeArrayAllocData
winhttp
WinHttpAddRequestHeaders
iphlpapi
GetPerAdapterInfo
msvcrt
free
comctl32
ImageList_BeginDrag
Sections
.text Size: - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmps0 Size: - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmps1 Size: - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmps2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmps3 Size: 15.4MB - Virtual size: 15.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ