Static task
static1
Behavioral task
behavioral1
Sample
abb377330bacf1b344d304e597e20568e2d7db8558c4bd6dbab7f31bb725c684.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
abb377330bacf1b344d304e597e20568e2d7db8558c4bd6dbab7f31bb725c684.exe
Resource
win10v2004-20240508-en
General
-
Target
abb377330bacf1b344d304e597e20568e2d7db8558c4bd6dbab7f31bb725c684
-
Size
3.2MB
-
MD5
71d72a4764bc92a95dbf70d74b01be46
-
SHA1
aaf51d2b46fb61388879adfd8e0c375af7e05db7
-
SHA256
abb377330bacf1b344d304e597e20568e2d7db8558c4bd6dbab7f31bb725c684
-
SHA512
c2f4fd2ec44ef0aa2862fa28af72c51a4d62c540f4fb356539b832b87228cd06896b5caa5f8fb66d8b9392e13fa1508dff35899701ec0511afaaa0f995722b43
-
SSDEEP
49152:dhW7+/NHH/cA/X07zvaQty/OwVcNOiYudcm185aZ0Cy9scEz:WC/NHfcA/X0vaqcO+fFm1+aZh8u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource abb377330bacf1b344d304e597e20568e2d7db8558c4bd6dbab7f31bb725c684
Files
-
abb377330bacf1b344d304e597e20568e2d7db8558c4bd6dbab7f31bb725c684.exe windows:4 windows x86 arch:x86
0a0a2842eaae1a950ad0d559153fa6d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetCurrentThread
ole32
CoInitialize
user32
DestroyWindow
GetSubMenu
atl
ord11
shell32
DragFinish
Shell_NotifyIconA
gdi32
SetViewportOrgEx
CreateDCA
advapi32
DeleteService
RegCloseKey
winspool.drv
ClosePrinter
ClosePrinter
comctl32
ord17
ImageList_Destroy
oledlg
ord8
oleaut32
VariantChangeType
LoadTypeLi
shlwapi
PathFileExistsA
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
waveOutOpen
ws2_32
WSACleanup
rasapi32
RasGetConnectStatusA
comdlg32
ChooseColorA
wininet
InternetCloseHandle
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ