Static task
static1
Behavioral task
behavioral1
Sample
df2f55527e1a424890abb2e994d12d47.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df2f55527e1a424890abb2e994d12d47.exe
Resource
win10v2004-20240226-en
General
-
Target
df2f55527e1a424890abb2e994d12d47
-
Size
2.3MB
-
MD5
df2f55527e1a424890abb2e994d12d47
-
SHA1
59ec7e6d66777eb5519aa52d0db7920663239515
-
SHA256
127eca335082d7fcb1d17976c0f5b2372823e5496510f7ad72f2be8867861f7f
-
SHA512
f3746c29271403fd312d801978a7eac2fb712657ee737edd5e9838e226a04dbd1c2e77858b2f24d3c8a62cabd0bb0720569f58754c06c89fda490660d3776542
-
SSDEEP
49152:L5WHi0Pr5m7FGaPFvku5g+waccN3VfI8eT+v6Cdo9PU+Db:1ir5mBzWu6YN3VP6CK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource df2f55527e1a424890abb2e994d12d47
Files
-
df2f55527e1a424890abb2e994d12d47.exe windows:4 windows x86 arch:x86
516bc272ca28057767d9886686aab00d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
advapi32
RegOpenKeyA
avifil32
AVIFileOpen
dinput8
DirectInput8Create
gdi32
DPtoLP
imm32
ImmIsIME
libeay32
RC4
oleaut32
VariantInit
shell32
ShellExecuteA
shlwapi
wnsprintfA
user32
GetDC
version
VerQueryValueA
wininet
FtpPutFileA
winmm
mmioSeek
ws2_32
bind
d3d9
Direct3DCreate9
dbghelp
MiniDumpWriteDump
fmod
_FSOUND_Init@12
iphlpapi
GetAdaptersInfo
npkcrypt
NPKCloseDriver
ole32
CoInitialize
Sections
.MPRESS1 Size: 2.3MB - Virtual size: 9.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE