Static task
static1
Behavioral task
behavioral1
Sample
230b1f21264d2ba57037fa48036fb0f962a2015c0b589a2968f54c4023634d75.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
230b1f21264d2ba57037fa48036fb0f962a2015c0b589a2968f54c4023634d75.exe
Resource
win10v2004-20231020-en
General
-
Target
230b1f21264d2ba57037fa48036fb0f962a2015c0b589a2968f54c4023634d75
-
Size
1.9MB
-
MD5
16f009278a503c960b427dc948aff7b4
-
SHA1
5018d0cb7b697c5e8f6ebf745a90bcee6cca370a
-
SHA256
230b1f21264d2ba57037fa48036fb0f962a2015c0b589a2968f54c4023634d75
-
SHA512
a3ad147956fe96726699bf14c37de75d81fbf7c0abbb78ba6537c23344498d18cc1fab193e1aeacc6b3cd1d70fb88332541e0b120351c8010b5b325e608bfb52
-
SSDEEP
24576:DWkmViGqB2QUxlOV11kvOnkRAdEZCnGAo6c+TSAGVkwN/MMgCutl0ZPMI7jD95u:DlUqB2QFHdfjtTSAGuwZ7DuOP57jD9U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 230b1f21264d2ba57037fa48036fb0f962a2015c0b589a2968f54c4023634d75
Files
-
230b1f21264d2ba57037fa48036fb0f962a2015c0b589a2968f54c4023634d75.exe windows:4 windows x86 arch:x86
e675a23ddf38818d9f307761406d980f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
SetLastError
user32
GetMenu
gdi32
PtVisible
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantChangeType
comctl32
ord17
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 496KB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ