Static task
static1
Behavioral task
behavioral1
Sample
68f5d0c6d2ebc56abbfc92de9a87383ffb7eac5ffa944fc52bbf4b9b428569dc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
68f5d0c6d2ebc56abbfc92de9a87383ffb7eac5ffa944fc52bbf4b9b428569dc.exe
Resource
win10v2004-20240508-en
General
-
Target
68f5d0c6d2ebc56abbfc92de9a87383ffb7eac5ffa944fc52bbf4b9b428569dc
-
Size
1.9MB
-
MD5
17651b9ca53c7c199ed609e66149cc56
-
SHA1
3c29c4906d2fa10fd2e65cb6a5d00837b69a6dbe
-
SHA256
68f5d0c6d2ebc56abbfc92de9a87383ffb7eac5ffa944fc52bbf4b9b428569dc
-
SHA512
cbd7959579616f4ca29946e973b64ffa95afe2a21dd985783223c3d441e0a8bf3e4c3dc457e8d3da226b4a3d8d1242a00c00741639227703dfe5db743216a019
-
SSDEEP
24576:apVmJSM0YqZHdo9PD4zgUBtSKG0D76Wz3ZixhWwQy03lxflRcqHhjZZ0:sYzKdjgCD76Wz3ZWhhQH3lPHX6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 68f5d0c6d2ebc56abbfc92de9a87383ffb7eac5ffa944fc52bbf4b9b428569dc
Files
-
68f5d0c6d2ebc56abbfc92de9a87383ffb7eac5ffa944fc52bbf4b9b428569dc.exe windows:4 windows x86 arch:x86
7c27e0994ec8880721e94128c4d28489
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetCurrentProcess
user32
IsIconic
gdi32
TextOutA
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ord17
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 552KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 976KB - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 404KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ