Static task
static1
Behavioral task
behavioral1
Sample
d0ac57d3e63b104376670fea9911b56878ca50eec76f2dc2406f9221b81ad7ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d0ac57d3e63b104376670fea9911b56878ca50eec76f2dc2406f9221b81ad7ee.exe
Resource
win10v2004-20231215-en
General
-
Target
d0ac57d3e63b104376670fea9911b56878ca50eec76f2dc2406f9221b81ad7ee
-
Size
9.1MB
-
MD5
852b18102084103d345c2d98449e20ab
-
SHA1
00acec70e11994e17ebaa02a918d60a18734195d
-
SHA256
d0ac57d3e63b104376670fea9911b56878ca50eec76f2dc2406f9221b81ad7ee
-
SHA512
84dbddf57d494ad7357d112f629bf624f78bb018bcf1da265f00648c9dbf2e5d8ab92a13d31fceb76103b486f79b84dcd8d08eb81b92e339bd36500f071a1897
-
SSDEEP
196608:elhhtNZFjnYRVQSgccc9x4zM2dcgB95N/i+eDDOq95k+:elhhtvFjUVQSPcc9xL2dHNoyu5k+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0ac57d3e63b104376670fea9911b56878ca50eec76f2dc2406f9221b81ad7ee
Files
-
d0ac57d3e63b104376670fea9911b56878ca50eec76f2dc2406f9221b81ad7ee.exe windows:4 windows x86 arch:x86
e2247da5d4a61e526dffa17a0df4fafd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessageA
ReleaseCapture
kernel32
GetEnvironmentStrings
IsBadCodePtr
gdi32
CreateCompatibleDC
GetTextMetricsA
gdiplus
GdipCreateFromHDC
ole32
CreateStreamOnHGlobal
imm32
ImmAssociateContext
shell32
ShellExecuteA
SHGetSpecialFolderPathA
shlwapi
PathFileExistsA
winmm
PlaySoundA
midiOutPrepareHeader
rasapi32
RasGetConnectStatusA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
closesocket
wininet
InternetReadFile
comdlg32
GetSaveFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 7.8MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ