Static task
static1
Behavioral task
behavioral1
Sample
31c14930a5f9cf6bbb0d4d7ebc75fa4d0f39c833b4e4628dea3e3e70d6be1345.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
31c14930a5f9cf6bbb0d4d7ebc75fa4d0f39c833b4e4628dea3e3e70d6be1345.exe
Resource
win10v2004-20240226-en
General
-
Target
31c14930a5f9cf6bbb0d4d7ebc75fa4d0f39c833b4e4628dea3e3e70d6be1345.exe
-
Size
2.8MB
-
MD5
79205275483bb149912ee8d65950f0f0
-
SHA1
1425bd3145a9690081537190b354fba554242b41
-
SHA256
31c14930a5f9cf6bbb0d4d7ebc75fa4d0f39c833b4e4628dea3e3e70d6be1345
-
SHA512
66666252e53c11a0284af8437cc70dd1d00bd9c4c68ac3aecb1ca57f4110737a8c48c65af29a85bb27c2638f3f6c25bcd1bca49d1a4dcd03f89cdc58dea070d5
-
SSDEEP
49152:Nk9w9JC02C8LTWdTmCx072+Yge5H5LuQrjIBmqEuwsficy3FNvPaA91l6Lk8:Nkm9A02NLTWdih72n95HBuQ4Bmlkfi10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31c14930a5f9cf6bbb0d4d7ebc75fa4d0f39c833b4e4628dea3e3e70d6be1345.exe
Files
-
31c14930a5f9cf6bbb0d4d7ebc75fa4d0f39c833b4e4628dea3e3e70d6be1345.exe.exe windows:5 windows x86 arch:x86
eb58a5a54fad05331a2dc82a077f13ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
recvfrom
kernel32
FormatMessageA
user32
DeleteMenu
gdi32
ExtSelectClipRgn
winspool.drv
ClosePrinter
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
CoDisconnectObject
oleaut32
VariantChangeType
comctl32
ImageList_AddMasked
oledlg
ord8
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.5MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ