Static task
static1
Behavioral task
behavioral1
Sample
2925d8f6e69f4f3933a9f501c129f886c59057c12de72b4e7859389ee53bc5cd.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2925d8f6e69f4f3933a9f501c129f886c59057c12de72b4e7859389ee53bc5cd.exe
Resource
win10v2004-20240426-en
General
-
Target
2925d8f6e69f4f3933a9f501c129f886c59057c12de72b4e7859389ee53bc5cd
-
Size
11.4MB
-
MD5
754fccf15236fc3c35b035268892e240
-
SHA1
358215c191aa49f74c2206760b049b175ecb928b
-
SHA256
2925d8f6e69f4f3933a9f501c129f886c59057c12de72b4e7859389ee53bc5cd
-
SHA512
21d680ccabe2c34c650e73e4925cdfc161343b3387a200d4c40eb12345aae31b6b61125936f79014c4099cdb64aa92054088c616ae91b0884aea914618392d8c
-
SSDEEP
196608:e7ZGJQU3beQwf+BledhnfZFTozGAQG/2Nw1KBqEhaMJjE3HhQC1qF9oUoTS3H0:e78JQybXwGSdNZFT+/JJCJjE3HhLG9Hk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2925d8f6e69f4f3933a9f501c129f886c59057c12de72b4e7859389ee53bc5cd
Files
-
2925d8f6e69f4f3933a9f501c129f886c59057c12de72b4e7859389ee53bc5cd.exe windows:5 windows x86 arch:x86
01a1dbea5dac919eb51c1b1d963aef60
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetNextDlgTabItem
CreateDialogIndirectParamA
CharUpperBuffW
gdi32
TextOutA
LineTo
wininet
InternetSetOptionA
InternetCloseHandle
ole32
CLSIDFromProgID
shlwapi
StrToIntExA
oledlg
ord8
oleaut32
SafeArrayGetElemsize
VariantCopyInd
rasapi32
RasHangUpA
RasHangUpA
winspool.drv
DocumentPropertiesA
OpenPrinterA
comctl32
ord17
ImageList_BeginDrag
wsock32
recv
advapi32
RegSetValueExA
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
DragQueryFileA
iphlpapi
GetAdaptersInfo
winmm
midiOutUnprepareHeader
ws2_32
gethostbyname
comdlg32
GetSaveFileNameA
Sections
boot Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
boot Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
boot Size: - Virtual size: 909KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
boot Size: - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
boot Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
boot Size: 9.1MB - Virtual size: 9.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
boot Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
boot Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
boot Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
boot Size: 556KB - Virtual size: 552KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
boot Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ