Static task
static1
Behavioral task
behavioral1
Sample
0ac3de198743e17fb039766881cec2762939bac2058af28985b6239ed9c73cf8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ac3de198743e17fb039766881cec2762939bac2058af28985b6239ed9c73cf8.exe
Resource
win10v2004-20240226-en
General
-
Target
0ac3de198743e17fb039766881cec2762939bac2058af28985b6239ed9c73cf8
-
Size
3.5MB
-
MD5
bcdaf3bf61660d821718aae509407489
-
SHA1
f8825ed375175eff5658b00383d1bce92c00788e
-
SHA256
0ac3de198743e17fb039766881cec2762939bac2058af28985b6239ed9c73cf8
-
SHA512
aef6b9ecadae4ef1d827e42c7b7ad95cdd6d54d8f552961d0f62762e18465573280f9b533bc70e415fc4969e9db3189b56bd8d708dd1f38d6dea70da66a72684
-
SSDEEP
98304:GVFRtzkGivbdeV2dpR/eGgv4iWlKZhYRkLq:AF7zkGivbdeV2YGgv+luYRt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ac3de198743e17fb039766881cec2762939bac2058af28985b6239ed9c73cf8
Files
-
0ac3de198743e17fb039766881cec2762939bac2058af28985b6239ed9c73cf8.exe windows:4 windows x86 arch:x86
5858b58e1c92a7f6b9b660ad9371afa0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsDirectoryEmptyA
kernel32
GlobalReAlloc
RtlUnwind
user32
TabbedTextOutA
CreateWindowExA
gdi32
GetClipBox
ExcludeClipRect
advapi32
CryptCreateHash
RegOpenKeyExA
ole32
CoCreateInstance
wininet
InternetOpenA
setupapi
SetupDiGetClassDevsA
oleaut32
SysFreeString
LoadTypeLi
crypt32
CryptStringToBinaryA
winhttp
WinHttpOpen
dbghelp
MakeSureDirectoryPathExists
psapi
EnumProcesses
oledlg
ord8
winspool.drv
ClosePrinter
ClosePrinter
comctl32
ord17
ImageList_GetImageInfo
winmm
midiStreamRestart
ws2_32
bind
version
VerLanguageNameA
shell32
Shell_NotifyIconA
comdlg32
GetOpenFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
Sections
.text Size: 2.1MB - Virtual size: 26.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ