Static task
static1
Behavioral task
behavioral1
Sample
704d805db295febee8e37eba0fbc8aa0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
704d805db295febee8e37eba0fbc8aa0.exe
Resource
win10v2004-20231215-en
General
-
Target
704d805db295febee8e37eba0fbc8aa0
-
Size
215KB
-
MD5
704d805db295febee8e37eba0fbc8aa0
-
SHA1
013e8fe48e29dac10a08c4610d2e3341035a1556
-
SHA256
e5a39be26c6d13d81df99d6bd4a0e23a5b68c560e5c30f893a6bd26a50fa76c8
-
SHA512
d41cf072a083725ce7fb16f9e10231d0e2017e43a4ff33a0f87f0716f7eef4b3b0212964d014cb5dfd492d2bd16407d36b5a5a44b19b5e4773b032841bc29ced
-
SSDEEP
6144:pNlmQoT6lWrfNCjGRuQpXc32UYjL4kyYw1saEuaygju8BGu:zA+AvRuQ5KzYjL4kZw1DER9jRB7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 704d805db295febee8e37eba0fbc8aa0
Files
-
704d805db295febee8e37eba0fbc8aa0.exe windows:5 windows x86 arch:x86
21b5239e8bf7a6cba0e39d7b96205bb7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
PlaySoundA
vulanhookprof
VulanHookDll
user32
CharNextA
gdi32
SetWindowExtEx
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
advapi32
RegSetValueExA
shell32
Shell_NotifyIconA
shlwapi
PathFindExtensionA
oledlg
ord8
ole32
CoRevokeClassObject
oleaut32
SafeArrayDestroy
wininet
InternetQueryDataAvailable
Sections
.text Size: 198KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE