Static task
static1
Behavioral task
behavioral1
Sample
104f62999c1fc0f8136fea2e05f34421.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
104f62999c1fc0f8136fea2e05f34421.exe
Resource
win10v2004-20231215-en
General
-
Target
104f62999c1fc0f8136fea2e05f34421
-
Size
2.2MB
-
MD5
104f62999c1fc0f8136fea2e05f34421
-
SHA1
b9446262e033bb589967f50e9e4a4b99b3a43637
-
SHA256
06ae0c1df7627b12dfa56245e15d2e18c0292a4e01789dedb0aa68ffaa404f16
-
SHA512
f768e10550db108ed70fb30bb028f141fa94ed6d69a5b44a671f616365192624ac937c2fa3bf40c2e6e7aeb06ed62465593eb3dfc006efec73cada7dc2ca0870
-
SSDEEP
49152:6qlYbHJbv4+VWy1lmc2KBa0BOKmebnvllPuTTzncf5iBqRU7LJ:RYbtFVrLmc2Qa0BOErvllPuLc4qRO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 104f62999c1fc0f8136fea2e05f34421
Files
-
104f62999c1fc0f8136fea2e05f34421.exe windows:5 windows x86 arch:x86
e91b33421832399aa82044685294ea4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
recvfrom
rasapi32
RasHangUpA
kernel32
SetLastError
user32
SetWindowRgn
gdi32
RectVisible
winspool.drv
DocumentPropertiesA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
StgCreateDocfileOnILockBytes
oleaut32
VariantChangeType
comctl32
ord17
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
GetFileTitleA
msvcrt
malloc
iphlpapi
GetAdaptersInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.0MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ