Static task
static1
Behavioral task
behavioral1
Sample
304fdb42e56e4230d69eb03a91d19cddaab7bb355d4d873ef966b8fc5c4df9fe.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
304fdb42e56e4230d69eb03a91d19cddaab7bb355d4d873ef966b8fc5c4df9fe.exe
Resource
win10v2004-20240226-en
General
-
Target
304fdb42e56e4230d69eb03a91d19cddaab7bb355d4d873ef966b8fc5c4df9fe
-
Size
1.7MB
-
MD5
008d72e82e3f26b02f17d68f78ed78f4
-
SHA1
7d1a567a6b4919360e3f6378081eb5dab21418dc
-
SHA256
304fdb42e56e4230d69eb03a91d19cddaab7bb355d4d873ef966b8fc5c4df9fe
-
SHA512
c57a9c1244912600f3f82114ef4ac1d7889b4d844ce6adb46f552dd828dec81363004363652e96112879a2c8cf1715c775db121f4c692efa2a055affd21e843b
-
SSDEEP
24576:/xSQL2Fb2XSF6cVaPkCa4z5sjYkn0A0TZ0voZDj1WX4NQmYq1yR0vy5pD9Gf+N/:/xSr9SmvCvMYkn0Se70iy5pD9GG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 304fdb42e56e4230d69eb03a91d19cddaab7bb355d4d873ef966b8fc5c4df9fe
Files
-
304fdb42e56e4230d69eb03a91d19cddaab7bb355d4d873ef966b8fc5c4df9fe.exe windows:4 windows x86 arch:x86
2a060ce8d639c12a719753f02f575d14
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
SetLastError
user32
GetSysColorBrush
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 696KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 984KB - Virtual size: 984KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�=�%�u� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE