Static task
static1
Behavioral task
behavioral1
Sample
36a31b4e1042622d5f2e4124bbb751e5aac4329f521a99fb55445a5fc4ebd57d.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
36a31b4e1042622d5f2e4124bbb751e5aac4329f521a99fb55445a5fc4ebd57d.exe
Resource
win10v2004-20231023-en
General
-
Target
36a31b4e1042622d5f2e4124bbb751e5aac4329f521a99fb55445a5fc4ebd57d
-
Size
9.9MB
-
MD5
65770593cc32bd2a9fc11c5d78029872
-
SHA1
6c03e51e7bc30117d90ef6584745ea8b5cb292a5
-
SHA256
36a31b4e1042622d5f2e4124bbb751e5aac4329f521a99fb55445a5fc4ebd57d
-
SHA512
17686f386cbe62b4059bc69f5384e2dde95200a7f904307c50ea92d76b27de3b2ae866487a568ed908e4b9bede49737c3965838ac1ab3598011815ae14502b80
-
SSDEEP
196608:iTew5WbQLOZchS2wzdIW1bdyFTvgoF0baTXaTx5b4j7N24/bofB:QeQdAdzbA+I0mTqNx4jdof
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36a31b4e1042622d5f2e4124bbb751e5aac4329f521a99fb55445a5fc4ebd57d
Files
-
36a31b4e1042622d5f2e4124bbb751e5aac4329f521a99fb55445a5fc4ebd57d.exe windows:5 windows x86 arch:x86
d39001d2813b450e2ffb72ddcd966c2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
CharUpperA
gdi32
CreateCompatibleBitmap
msimg32
TransparentBlt
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
DragQueryFileA
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
uxtheme
GetWindowTheme
ole32
OleGetClipboard
oleaut32
LoadRegTypeLi
oledlg
ord8
winmm
PlaySoundA
gdiplus
GdipSetInterpolationMode
oleacc
AccessibleObjectFromWindow
imm32
ImmGetContext
Sections
.text Size: 9.8MB - Virtual size: 12.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE