Static task
static1
Behavioral task
behavioral1
Sample
7feab7164caf4f11a63cc2a4e4b181313457bcc171381581bb2b8bc9062c9983.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7feab7164caf4f11a63cc2a4e4b181313457bcc171381581bb2b8bc9062c9983.exe
Resource
win10v2004-20240508-en
General
-
Target
7feab7164caf4f11a63cc2a4e4b181313457bcc171381581bb2b8bc9062c9983
-
Size
1.4MB
-
MD5
372bb474525557cb54a40bb26e6725ec
-
SHA1
6afc5c7e9f113a36b04d5cc781f3783c54a10bae
-
SHA256
7feab7164caf4f11a63cc2a4e4b181313457bcc171381581bb2b8bc9062c9983
-
SHA512
696ab834a797e73bab947320b89ae2cb79039c3b0c7a9d1e2f342bc0e4ecfa84010979be60e6b604d838cc2352a3996fc50883d1f7687935dfaf7ea78994d38e
-
SSDEEP
24576:tjRq9yZAuTk6fFppoKbmMc902nqdirMtFvrDT0TPo669e5pxmUCSjltriIm/:bq9DmpUMc908qdirMtFDDT26UCUtrij
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7feab7164caf4f11a63cc2a4e4b181313457bcc171381581bb2b8bc9062c9983
Files
-
7feab7164caf4f11a63cc2a4e4b181313457bcc171381581bb2b8bc9062c9983.exe windows:4 windows x86 arch:x86
cc5b2992b61444c5345176186e02d435
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
iphlpapi
GetAdaptersInfo
winmm
PlaySoundA
ws2_32
inet_addr
rasapi32
RasHangUpA
user32
GetDC
gdi32
Pie
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
ChooseFontA
advapi32
RegCloseKey
shell32
DragFinish
ole32
OleRun
oleaut32
VariantInit
comctl32
ord17
oledlg
ord8
wininet
InternetOpenA
wldap32
ord29
Sections
.MPRESS1 Size: 1.3MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE