Static task
static1
Behavioral task
behavioral1
Sample
9fd4f7bbc5ed31191d230540b6a7c0343707b6f99ac8193d820c8d1e900d4248.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
9fd4f7bbc5ed31191d230540b6a7c0343707b6f99ac8193d820c8d1e900d4248.exe
Resource
win10v2004-20240508-en
General
-
Target
9fd4f7bbc5ed31191d230540b6a7c0343707b6f99ac8193d820c8d1e900d4248
-
Size
13.6MB
-
MD5
6bed956a8d643d8e1767890da2516305
-
SHA1
e6a79dd5774bd2f3eaedd34de5f31bb04f396e11
-
SHA256
9fd4f7bbc5ed31191d230540b6a7c0343707b6f99ac8193d820c8d1e900d4248
-
SHA512
182d10ac9a0009e9f2296937c6e99e653bdd3be59a66d68916a5ef9e3bbf68d2f13fd75e58aaa1e78c7d0a84998b4a1007f5bb09ad2480ed39562e6944f6790a
-
SSDEEP
196608:08ELloidlKYayh19QFes3pqWm/6s4qRJiyC/zX+7TANLTcsr8TSFo7Ee:tqZFacKpV0RGLX+3ANHcsgmm7f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9fd4f7bbc5ed31191d230540b6a7c0343707b6f99ac8193d820c8d1e900d4248
Files
-
9fd4f7bbc5ed31191d230540b6a7c0343707b6f99ac8193d820c8d1e900d4248.exe windows:5 windows x86 arch:x86
1b70b2084ca3d38258d9476f350ba062
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamClose
ws2_32
ntohl
version
VerLanguageNameA
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetSysColorBrush
gdi32
CreateDCA
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
GetUserNameA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ImageList_Destroy
wininet
DeleteUrlCacheEntry
Sections
.text Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 839KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WJ5 Size: - Virtual size: 7.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.:Bw Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.DCH Size: 13.5MB - Virtual size: 13.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 140KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ