Static task
static1
Behavioral task
behavioral1
Sample
62671d975feddd279b2f9353af20e923c31a862a05edd0b1e69ad2755a65f9d9.exe
Resource
win7-20231023-en
General
-
Target
62671d975feddd279b2f9353af20e923c31a862a05edd0b1e69ad2755a65f9d9
-
Size
9.6MB
-
MD5
a5769a9b4a730983d3e49e02c3e23226
-
SHA1
ef989d616a72c93f4c5e6c221e80685480f950aa
-
SHA256
62671d975feddd279b2f9353af20e923c31a862a05edd0b1e69ad2755a65f9d9
-
SHA512
e0643f89708d0373c02b4be53553c1f43bacf9d781001a7c369234faefb8ee232ea51efc5e3aca0c7804078c3c85174480b2a3e2de62f60fb06ccaf58f81fc73
-
SSDEEP
196608:VyIt/qRv7tDayH8aE1v9o/3L6XAjs7f+2LfKLnbken7AC/7cX3Oo:Vp/G7tDaIVaK/76XD2LnAYzcnOo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 62671d975feddd279b2f9353af20e923c31a862a05edd0b1e69ad2755a65f9d9
Files
-
62671d975feddd279b2f9353af20e923c31a862a05edd0b1e69ad2755a65f9d9.exe windows:4 windows x86 arch:x86
7d3b6bb0662414420c986a1b8f56d797
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
rasapi32
RasHangUpA
winmm
PlaySoundA
ws2_32
inet_ntoa
user32
GetDC
gdi32
Pie
winspool.drv
ClosePrinter
comdlg32
ChooseFontA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleRun
oleaut32
SafeArrayUnaccessData
comctl32
ord17
wininet
InternetOpenA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.MPRESS1 Size: 8.9MB - Virtual size: 15.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ