Static task
static1
Behavioral task
behavioral1
Sample
f958b0c93b0b996d025a550e41e940d0d9c162ec4239b9db1688f0d617fc4994.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f958b0c93b0b996d025a550e41e940d0d9c162ec4239b9db1688f0d617fc4994.exe
Resource
win10v2004-20231023-en
General
-
Target
f958b0c93b0b996d025a550e41e940d0d9c162ec4239b9db1688f0d617fc4994
-
Size
1.6MB
-
MD5
e7a0654b47c8200ab4737876efd041ce
-
SHA1
a64222f505117b147459b55691df39541c079ba1
-
SHA256
f958b0c93b0b996d025a550e41e940d0d9c162ec4239b9db1688f0d617fc4994
-
SHA512
13926f82888df0c5afe9cf6305bd60bc242ae4602a03dedda1911a8ab0a3f6fbd324b3421d91a87c238bbdd32c2d9210fd594839af9cc5595f86f751de0e760d
-
SSDEEP
24576:ydQn5KoNCVJO7HV/823PtAwKhmQobFOxsbH5uRPEoysJ:4QnDCV4pPtAwKh4bFOuHUdEoy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f958b0c93b0b996d025a550e41e940d0d9c162ec4239b9db1688f0d617fc4994
Files
-
f958b0c93b0b996d025a550e41e940d0d9c162ec4239b9db1688f0d617fc4994.exe windows:6 windows x86 arch:x86
d5785b08bc7e1e7b2d5286cbc973aebe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
sndPlaySoundW
oleacc
LresultFromObject
shlwapi
PathIsRelativeW
winspool.drv
DocumentPropertiesW
comdlg32
FindTextW
comctl32
FlatSB_SetScrollInfo
shell32
DragFinish
user32
CopyImage
version
GetFileVersionInfoSizeW
oleaut32
GetErrorInfo
advapi32
RegSetValueExW
msvcrt
memcpy
ole32
RevokeDragDrop
gdi32
Pie
Sections
.text Size: 1.5MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE