Static task
static1
Behavioral task
behavioral1
Sample
ȫԶȫܲ(...).exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ȫԶȫܲ(...).exe
Resource
win10v2004-20231215-en
General
-
Target
3d97f16f54de5405f6d6d657595b4e98
-
Size
350KB
-
MD5
3d97f16f54de5405f6d6d657595b4e98
-
SHA1
a05b414f8d8ca7e47657b8d5ba7bcf62988a93ce
-
SHA256
6b721fbafb8293383385e85a34678a0fb575d79a6181d0bd6d77e2469db5e09f
-
SHA512
0db22e39d072093a61c04c4ba88a2e9e665e0c3ab6c4e3b168801c0adf11be43a1006537923da76429299bbac38fe10ce1d2297c4d3be3215d156eafa3de4e17
-
SSDEEP
6144:LuHbYrZT9zjObZqJQmmIGKcCImpMnZAS6XGRWu6nFk1tqC6khguDlaMkVSZdCyBA:K7q9KZqyIGKRcnZAS6my+1V6uguRaCdu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ȫԶȫܲ(...).exe
Files
-
3d97f16f54de5405f6d6d657595b4e98.zip
-
ȫԶȫܲ(...).exe.exe windows:5 windows x86 arch:x86
d916b1b3c5ae9175c6e512d9e4ec90a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
user32
SetClipboardData
gdi32
GetViewportOrgEx
winmm
waveOutUnprepareHeader
winspool.drv
OpenPrinterA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
StgOpenStorageOnILockBytes
oleaut32
VariantChangeType
comctl32
ord17
oledlg
ord8
ws2_32
recvfrom
wininet
HttpSendRequestA
comdlg32
GetFileTitleA
Sections
.text Size: 340KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE