Static task
static1
Behavioral task
behavioral1
Sample
d8774019d1e940dfb74f4a8fba914900c2cc3b699f8bb332770a750f16284da4.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
d8774019d1e940dfb74f4a8fba914900c2cc3b699f8bb332770a750f16284da4.exe
Resource
win10v2004-20231023-en
General
-
Target
d8774019d1e940dfb74f4a8fba914900c2cc3b699f8bb332770a750f16284da4
-
Size
14.4MB
-
MD5
cfab754e5a024505795df26d4d13ffe6
-
SHA1
9e3ff1837a639b8deefd48c0b5d45642ce8fac7a
-
SHA256
d8774019d1e940dfb74f4a8fba914900c2cc3b699f8bb332770a750f16284da4
-
SHA512
03345a9ef0ca252a8a4606856c19f3f7b15f8899d0fa362599ec6bf2e26daeccd32794600ff8e6837ea753bbfe2153ff7e255676ab21d0f1fd8b8ccdd90a00a7
-
SSDEEP
393216:pJwJZBuqYR38IS2TBr9w/MgiILDZhmjQ:p22qo8ryB9wUoLXm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8774019d1e940dfb74f4a8fba914900c2cc3b699f8bb332770a750f16284da4
Files
-
d8774019d1e940dfb74f4a8fba914900c2cc3b699f8bb332770a750f16284da4.exe windows:4 windows x86 arch:x86
f7fe34c24392006a3bab98349e3b3bfa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
user32
FindWindowA
gdi32
GetDeviceCaps
winspool.drv
OpenPrinterA
comctl32
ord17
oleaut32
VariantTimeToSystemTime
advapi32
RegCloseKey
ws2_32
inet_addr
Sections
.text Size: - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp1 Size: - Virtual size: 4.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 692KB - Virtual size: 689KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 6.1MB - Virtual size: 6.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 368KB - Virtual size: 364KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE