Static task
static1
Behavioral task
behavioral1
Sample
03b928e121378b0de910e554b13828dad42160cc966f0590b737b7c817b8ee28.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
03b928e121378b0de910e554b13828dad42160cc966f0590b737b7c817b8ee28.exe
Resource
win10v2004-20231020-en
General
-
Target
03b928e121378b0de910e554b13828dad42160cc966f0590b737b7c817b8ee28
-
Size
617KB
-
MD5
bfdb1a9aa133fe00026306cc2128fb8b
-
SHA1
5a55ecda26d549a5bc96cb7ea08e42e4f1d2168f
-
SHA256
03b928e121378b0de910e554b13828dad42160cc966f0590b737b7c817b8ee28
-
SHA512
3b3feeb7644fd8f397ab578c2812f85a7c6a73ff1c5b7b631b6a054b3837ea6713964e2c716b62429bdfe9b037e59b484461826dcb8e6f74253405354d3cd7fb
-
SSDEEP
12288:DG5NUOpndp70aF7LsOXIXwOPrL+Lh3J30IcoenAEspH4LhgGn:q5NUOx70aFMOYrG3JkDAJ4Lhg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03b928e121378b0de910e554b13828dad42160cc966f0590b737b7c817b8ee28
Files
-
03b928e121378b0de910e554b13828dad42160cc966f0590b737b7c817b8ee28.exe windows:4 windows x86 arch:x86
4b2a87182083bd7031733aac6959a3b3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
ole32
CoCreateInstance
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
winmm
PlaySoundA
Sections
pec1 Size: 541KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 59KB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE