Static task
static1
Behavioral task
behavioral1
Sample
9ee6ec3aa07643dcbf463913fada69b10ab0850cb1636f1069ab5fa3ce8ac329.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
9ee6ec3aa07643dcbf463913fada69b10ab0850cb1636f1069ab5fa3ce8ac329.exe
Resource
win10v2004-20231023-en
General
-
Target
9ee6ec3aa07643dcbf463913fada69b10ab0850cb1636f1069ab5fa3ce8ac329
-
Size
13.3MB
-
MD5
237c1c0117b6a209b1064f16a91aaa87
-
SHA1
05725850bca9572694a958401b4c3b9d18886a71
-
SHA256
9ee6ec3aa07643dcbf463913fada69b10ab0850cb1636f1069ab5fa3ce8ac329
-
SHA512
461ea65b62ead8ecc84500c14c4ffb5287391adc637fae0d8da811ba31654c596bae7f0f34bb5f29c4f0ed58441f45f5aaa3f9005e5e237ae2d164f7ee16821e
-
SSDEEP
196608:6MQHENBKWrjWBehsbhSECsqaqgvbi18l3jkOReqCWMPOTYYq6pqEADmtZemFSc+M:KQafSfsLqgT5l3jFReqCMTYIIynFZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ee6ec3aa07643dcbf463913fada69b10ab0850cb1636f1069ab5fa3ce8ac329
Files
-
9ee6ec3aa07643dcbf463913fada69b10ab0850cb1636f1069ab5fa3ce8ac329.exe windows:5 windows x86 arch:x86
3c192e9a10c2f5721374d792e3fb1991
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutReset
ws2_32
htons
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
IsIconic
CharUpperBuffW
gdi32
ExtSelectClipRgn
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
T-VMP Size: - Virtual size: 876KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 12.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 1008KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 11.0MB - Virtual size: 11.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 548KB - Virtual size: 545KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ