Static task
static1
Behavioral task
behavioral1
Sample
58724bd486e698276e62b530d1fb48af.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
58724bd486e698276e62b530d1fb48af.exe
Resource
win10v2004-20231215-en
General
-
Target
58724bd486e698276e62b530d1fb48af
-
Size
1.1MB
-
MD5
58724bd486e698276e62b530d1fb48af
-
SHA1
f8339081e545409af421bba1da248ca6239200e6
-
SHA256
3e468073365a9a8ff8b5225180e5f44ba2116456a98a6136f03e4e26b156d82c
-
SHA512
3ca961d61032a5bf134e233bceb90f172dfa04dde0685bf0dfc72fb9475a885a14f853793a7278b57500eb929cd44d2a60cd60fc267e6db092705c9c4df5157a
-
SSDEEP
24576:67lK9J1iGp7Y0XnHPfU0jL8ZxloKo/YCg:4kP1iEXnvJgZxl9o/YC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58724bd486e698276e62b530d1fb48af
Files
-
58724bd486e698276e62b530d1fb48af.exe windows:4 windows x86 arch:x86
a7096e59f688bb896cc63aaf9fca6012
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
GlobalAddAtomA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
ClientToScreen
MessageBoxA
gdi32
GetCurrentObject
winmm
midiStreamStop
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CoRevokeClassObject
oleaut32
RegisterTypeLi
comctl32
ord17
oledlg
ord8
ws2_32
WSACleanup
wininet
HttpOpenRequestA
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 497KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp0 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp0 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp0 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp0 Size: - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 317KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp1 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE