Static task
static1
Behavioral task
behavioral1
Sample
fd7c0edbdd27a2f825ab3184a21a559b1bc4c595ee64da60a723bfdd399dc631.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd7c0edbdd27a2f825ab3184a21a559b1bc4c595ee64da60a723bfdd399dc631.exe
Resource
win10v2004-20240426-en
General
-
Target
fd7c0edbdd27a2f825ab3184a21a559b1bc4c595ee64da60a723bfdd399dc631
-
Size
13.4MB
-
MD5
07eb8be351da96ef3216974506c28e6d
-
SHA1
7c561fdeca52388cc592e2f11ec26e8d848ab7dd
-
SHA256
fd7c0edbdd27a2f825ab3184a21a559b1bc4c595ee64da60a723bfdd399dc631
-
SHA512
2c7475c18774c59d0efb829e6c9071d67d02cfdaecc686246fff18c31b323144c59fcd50091e77f64639928c202a0c7a2fb87ace8c27e3f0c5e3e5fb8a519ef5
-
SSDEEP
393216:g2VNcfBMRyizG8qtTaToLC0F+PcJS4KDkcCuKS:g8cf23zG88eTJ0IPol+hCu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd7c0edbdd27a2f825ab3184a21a559b1bc4c595ee64da60a723bfdd399dc631
Files
-
fd7c0edbdd27a2f825ab3184a21a559b1bc4c595ee64da60a723bfdd399dc631.exe windows:5 windows x86 arch:x86
af42bdb21f1ee0d364d411d2c86170e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetFocus
CharUpperBuffW
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetIcon
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
NiMaSiLe Size: - Virtual size: 953KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
NiMaSiLe Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
NiMaSiLe Size: - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NiMaSiLe Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
NiMaSiLe Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NiMaSiLe Size: 11.0MB - Virtual size: 11.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NiMaSiLe Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
NiMaSiLe Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NiMaSiLe Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
NiMaSiLe Size: 552KB - Virtual size: 551KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
NiMaSiLe Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ