Static task
static1
Behavioral task
behavioral1
Sample
5f29b1662e76b980ebde238a5fdaf11eaf4fdcf84c9ad3c3ef8e4f4283d2fa32.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5f29b1662e76b980ebde238a5fdaf11eaf4fdcf84c9ad3c3ef8e4f4283d2fa32.exe
Resource
win10v2004-20231215-en
General
-
Target
5f29b1662e76b980ebde238a5fdaf11eaf4fdcf84c9ad3c3ef8e4f4283d2fa32
-
Size
13.5MB
-
MD5
c362871faada11d01ea6b4d3a3ef22de
-
SHA1
d6875a7826010b3474e7b3f60c86abd4962b10cb
-
SHA256
5f29b1662e76b980ebde238a5fdaf11eaf4fdcf84c9ad3c3ef8e4f4283d2fa32
-
SHA512
26111321987fc7229dbe70d6e1ed516daac51e3e4182b6b07d54e7697a67f0dc7d5699f59bd3f309ad49ebe0465b4a9f865a6d9502f3d4b34727d8601da5046d
-
SSDEEP
393216:Agek7+eoN0lH/WycXqten57ME4HnOSIfXoig:AgF7c0zLcn5fwOM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5f29b1662e76b980ebde238a5fdaf11eaf4fdcf84c9ad3c3ef8e4f4283d2fa32
Files
-
5f29b1662e76b980ebde238a5fdaf11eaf4fdcf84c9ad3c3ef8e4f4283d2fa32.exe windows:4 windows x86 arch:x86
d703566f6aa3aa62806117007c1442c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
user32
SetForegroundWindow
gdi32
GetDeviceCaps
winspool.drv
OpenPrinterA
comctl32
ord17
advapi32
RegCloseKey
shell32
SHGetSpecialFolderPathA
ws2_32
inet_addr
Sections
.text Size: - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.9MB - Virtual size: 5.9MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 16KB - Virtual size: 13KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 432KB - Virtual size: 429KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE