Static task
static1
Behavioral task
behavioral1
Sample
86eebacf320994e282caa5c75d9b5efcc89fec1ff676f03fdc24016a31baed89.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
86eebacf320994e282caa5c75d9b5efcc89fec1ff676f03fdc24016a31baed89.exe
Resource
win10v2004-20231215-en
General
-
Target
86eebacf320994e282caa5c75d9b5efcc89fec1ff676f03fdc24016a31baed89
-
Size
2.0MB
-
MD5
f961f54a56d9ff28b9f8371a732eea6c
-
SHA1
c09e39d9360fe8d39e3fe36e72b4f8135d475794
-
SHA256
86eebacf320994e282caa5c75d9b5efcc89fec1ff676f03fdc24016a31baed89
-
SHA512
9c61426548686dfcffb3e0d03c68a52d02533b95509786cb67dd8eaa48722765ed7835005d05eb7d10ab061943ecbfc929ea09f9e4979efef07b7601d7049f85
-
SSDEEP
49152:LVQniGJepo2bkn04yHYoWFtCWBhO3zdyiiam:8iwepoiqXQtWbMJyi9m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86eebacf320994e282caa5c75d9b5efcc89fec1ff676f03fdc24016a31baed89
Files
-
86eebacf320994e282caa5c75d9b5efcc89fec1ff676f03fdc24016a31baed89.exe windows:4 windows x86 arch:x86
ee10c3ec9e1468b6de2b56f269c5873f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
WSACleanup
kernel32
CreateSemaphoreA
user32
wsprintfA
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
SHChangeNotify
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 992KB - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ