Static task
static1
Behavioral task
behavioral1
Sample
10e22251225902ee1b63a467668ec14aa7c8823b6980caa8d34f3f0430f1c210.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
10e22251225902ee1b63a467668ec14aa7c8823b6980caa8d34f3f0430f1c210.exe
Resource
win10v2004-20231020-en
General
-
Target
10e22251225902ee1b63a467668ec14aa7c8823b6980caa8d34f3f0430f1c210
-
Size
10.2MB
-
MD5
fd5d84ed184b057dc7045806def3a8b8
-
SHA1
ab1f216d338fadd6344fe13f8c389316a2d17911
-
SHA256
10e22251225902ee1b63a467668ec14aa7c8823b6980caa8d34f3f0430f1c210
-
SHA512
01548a10e06954a52a7da07c4128cd4cc95c8fb3cca0f4209bf1fab601236dee506a324660acd03fa5e64600b02226194db1c099e2f4a687601fffed8f7b7397
-
SSDEEP
196608:ccXtjQiyuBUad84j8rEUzgHu7YUjPG/7G0goLpHPX9tWE/:6iygUK8weYcPMNV8E/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10e22251225902ee1b63a467668ec14aa7c8823b6980caa8d34f3f0430f1c210
Files
-
10e22251225902ee1b63a467668ec14aa7c8823b6980caa8d34f3f0430f1c210.exe windows:4 windows x86 arch:x86
a1ed4f13867db98acc9a928e918fe5e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjects
RaiseException
user32
SystemParametersInfoA
SystemParametersInfoA
gdi32
GetWindowOrgEx
ExcludeClipRect
winmm
midiStreamClose
midiOutUnprepareHeader
winspool.drv
DocumentPropertiesA
DocumentPropertiesA
advapi32
RegCreateKeyExA
RegOpenKeyExA
shell32
ShellExecuteA
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetDim
UnRegisterTypeLi
comctl32
ImageList_Destroy
ImageList_GetIcon
ws2_32
WSAAsyncSelect
inet_ntoa
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 7.5MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Tmd Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Tmd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ