Static task
static1
Behavioral task
behavioral1
Sample
81e649abc29625f432227b67bc5ddcb622cf552b942091290d6b5fdcb0992d9e.exe
Resource
win7-20231215-en
General
-
Target
81e649abc29625f432227b67bc5ddcb622cf552b942091290d6b5fdcb0992d9e
-
Size
458KB
-
MD5
7ef044c2759d418088dbb1db2c982932
-
SHA1
d068312de37979c169ac5276d1c916196066e161
-
SHA256
81e649abc29625f432227b67bc5ddcb622cf552b942091290d6b5fdcb0992d9e
-
SHA512
7244a614f1831a1fb45369a3b9da3fbe5124c2a17eb8b35302308805d59eb8ff35d4a01d7556485b557e038bd9e98f8593c32904d18e47cad2e6f816da8fffac
-
SSDEEP
12288:xvOiIFX6qSk89w9fQjd/s/fSCQRH0sFb:xlqZ8uhMd/obQRH0sN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81e649abc29625f432227b67bc5ddcb622cf552b942091290d6b5fdcb0992d9e
Files
-
81e649abc29625f432227b67bc5ddcb622cf552b942091290d6b5fdcb0992d9e.exe windows:4 windows x86 arch:x86
1306495a9b86e8fc1166bee05431920c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
wsprintfA
gdi32
SelectClipRgn
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleUninitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recvfrom
comdlg32
GetFileTitleA
Sections
.text Size: 432KB - Virtual size: 972KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE