Static task
static1
Behavioral task
behavioral1
Sample
67910cf27c732b63041567c28e40cfec63c7e7c3bf96fd0498194d016706afd7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
67910cf27c732b63041567c28e40cfec63c7e7c3bf96fd0498194d016706afd7.exe
Resource
win10v2004-20231222-en
General
-
Target
894771f4821ea3f03d5555a2943fa2f7.bin
-
Size
1.3MB
-
MD5
020fb83f6cf0f4e1b751ead7044eb3ae
-
SHA1
0388d59763a101099ed05fdd84d2587d7c5a04b3
-
SHA256
e652b0d9655128860ce0dc63f90184770a3ac0e1a8b3f5e3f268a575fcaba662
-
SHA512
b5cbe3f53e69c601d5126d0313aef76dad202bf558fa2e430dcb27f37dbde941085450a724da324968ce7004f5512c916296b841ba887ef01a79db10c767ae58
-
SSDEEP
24576:kiRDB9t73r5W/Vl7EGs2WXpSF/V0OA5AhyL949FbwA5+Bk7:kU9FVW/nEGsr2NbAagGF3QK7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/67910cf27c732b63041567c28e40cfec63c7e7c3bf96fd0498194d016706afd7.exe
Files
-
894771f4821ea3f03d5555a2943fa2f7.bin.zip
Password: infected
-
67910cf27c732b63041567c28e40cfec63c7e7c3bf96fd0498194d016706afd7.exe.exe windows:5 windows x86 arch:x86
Password: infected
637cf2b67e9a0ffdcc2d924ea7f53b8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
GetTimeZoneInformation
user32
PeekMessageA
gdi32
ExtTextOutA
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_GetIcon
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 448KB - Virtual size: 920KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ