Static task
static1
Behavioral task
behavioral1
Sample
28162bbbe25230a97e66c733f6a65319.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
28162bbbe25230a97e66c733f6a65319.exe
Resource
win10v2004-20231215-en
General
-
Target
28162bbbe25230a97e66c733f6a65319
-
Size
241KB
-
MD5
28162bbbe25230a97e66c733f6a65319
-
SHA1
fc9a9d836e8b0a7d2b14d82971e82f3d1d2b240b
-
SHA256
817b4efaca8454d49535d9a916d788af5ae366cf744ddba461f3f59ec741251f
-
SHA512
36607273eefa67daa56534a64b0a13a6377288ca0ea48b8ddea97eef2b53f80e8145d3c71d98d522662c3c507fe601ce74e4a4f849bb6b0a0080906065a10540
-
SSDEEP
6144:vkBZy/geEsqovLQEc1W0gEHpobffR0b/LNbG0fUSBNf94DywF7:YkqovLFc1LZJwfp0DLNfFNf9ml
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28162bbbe25230a97e66c733f6a65319
Files
-
28162bbbe25230a97e66c733f6a65319.exe windows:4 windows x86 arch:x86
e74e97d8c96dd7e21134445cee6a95f7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
kernel32
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
GetProcessHeap
GetTickCount
GetFileSize
WaitForSingleObject
GetSystemDefaultLangID
LoadLibraryA
GetWindowsDirectoryA
CloseHandle
DeleteCriticalSection
GetModuleHandleA
ExitProcess
FreeLibrary
CompareStringA
SetLastError
InitializeCriticalSection
GetLastError
GetSystemDirectoryA
GetCurrentProcessId
GetModuleFileNameA
ExitProcess
GetSystemTimeAsFileTime
GetVersionExA
user32
SetRect
GetSystemMetrics
GetWindowRect
GetDC
EnumWindowStationsA
IsIconic
SetForegroundWindow
ShowWindow
CopyRect
GetClientRect
GetLastActivePopup
DrawIcon
ReleaseDC
TranslateMessage
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.strings Size: 5KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ