Static task
static1
Behavioral task
behavioral1
Sample
93a56b30edc8e4637fe331e8cc3aaa7a3157334fb8aacb7c4bf0e8de99966f47.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
93a56b30edc8e4637fe331e8cc3aaa7a3157334fb8aacb7c4bf0e8de99966f47.exe
Resource
win10v2004-20240426-en
General
-
Target
93a56b30edc8e4637fe331e8cc3aaa7a3157334fb8aacb7c4bf0e8de99966f47
-
Size
1.7MB
-
MD5
83e35f8737d913c27af7716cc635f31a
-
SHA1
57cec0be78cff87a39ab7a2827d9b3e3c0b6ac15
-
SHA256
93a56b30edc8e4637fe331e8cc3aaa7a3157334fb8aacb7c4bf0e8de99966f47
-
SHA512
cd19973f4540db69ae2ae73fa911fbbd902b8216095347ec542cde679b6a7a22f3289b136e586afcc4eb4e6c58eda3f7266d512087848fdbd6bfba8131600a1f
-
SSDEEP
24576:iSLlZvwRUYwCxiy0nCG4GC4ydPOyXDOyylQygyyayy2BCLUitzA39ylyN8hsNPMt:iSZFwYCxsIRN1BSBZ9b0HS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93a56b30edc8e4637fe331e8cc3aaa7a3157334fb8aacb7c4bf0e8de99966f47
Files
-
93a56b30edc8e4637fe331e8cc3aaa7a3157334fb8aacb7c4bf0e8de99966f47.exe windows:4 windows x86 arch:x86
2db8dbb1de652e0c209dea96d592cf86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
user32
OpenClipboard
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recv
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 980KB - Virtual size: 980KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 768KB - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ