Static task
static1
Behavioral task
behavioral1
Sample
13d59e531fc02a0c83048e2d679615495b6e98fbd0b13528ad0eab87d4aa73e8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
13d59e531fc02a0c83048e2d679615495b6e98fbd0b13528ad0eab87d4aa73e8.exe
Resource
win10v2004-20240508-en
General
-
Target
13d59e531fc02a0c83048e2d679615495b6e98fbd0b13528ad0eab87d4aa73e8
-
Size
225KB
-
MD5
b91289f428e599edefec87099c341070
-
SHA1
08712c4229cd3a888742dc434c6a51094111b5aa
-
SHA256
13d59e531fc02a0c83048e2d679615495b6e98fbd0b13528ad0eab87d4aa73e8
-
SHA512
84665c5cebeb1647d40cbed95c7f59e3f14b2a295781f36514253d5734fbd733619a367ad506cb74dd2a9c9bbb355fa43b14649b93e886a14422c30c94a9b1c5
-
SSDEEP
3072:YbU9CdO9CHA9ULbXnWBwDazhdnuvV8/Jnfl0qSujttA3MH32044hgtZooqzMBZ5W:YbroCg9QWBjz7u98/oqS6fAZT0Rz0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13d59e531fc02a0c83048e2d679615495b6e98fbd0b13528ad0eab87d4aa73e8
Files
-
13d59e531fc02a0c83048e2d679615495b6e98fbd0b13528ad0eab87d4aa73e8.exe windows:4 windows x86 arch:x86
889d2aba7e23c441b75364ab24c0a2d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
WSASocketA
gdiplus
GdipCreateBitmapFromStreamICM
wininet
HttpOpenRequestA
user32
MessageBoxA
gdi32
StretchBlt
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegDeleteKeyA
shell32
ShellExecuteExA
comctl32
_TrackMouseEvent
shlwapi
PathStripToRootA
oledlg
ord8
ole32
CoRegisterMessageFilter
oleaut32
SafeArrayDestroy
d3d9
Direct3DCreate9
Sections
.text Size: 203KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE