Static task
static1
Behavioral task
behavioral1
Sample
f18360d9e319ca268677e0c2bc017c8504dfd8b14f6f88c386eb4508d76657d3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f18360d9e319ca268677e0c2bc017c8504dfd8b14f6f88c386eb4508d76657d3.exe
Resource
win10v2004-20240426-en
General
-
Target
f18360d9e319ca268677e0c2bc017c8504dfd8b14f6f88c386eb4508d76657d3
-
Size
10.2MB
-
MD5
3f7ec46e7bf0a2ffd065e936de3af8ff
-
SHA1
45024c90017fc1dfa65e30c97d4c113036937c5e
-
SHA256
f18360d9e319ca268677e0c2bc017c8504dfd8b14f6f88c386eb4508d76657d3
-
SHA512
ca38421d2c2bbd2db2c2c03d39e84194f19930df2db0520923e181f0503de8abd02ca880cc8dbd55eaed4d999d1c99d5df83215eaf5c2ed0013042796b3fadb1
-
SSDEEP
196608:UozZBxTT6lsJcnuhqMrx0gHi6gMDbUYAeoLWFrAbU:Uc536ScnuhqMOZzMkWybU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f18360d9e319ca268677e0c2bc017c8504dfd8b14f6f88c386eb4508d76657d3
Files
-
f18360d9e319ca268677e0c2bc017c8504dfd8b14f6f88c386eb4508d76657d3.exe windows:5 windows x86 arch:x86
02106ce866282a5f40b1ab5a36befabe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
WinHelpA
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_GetImageCount
wininet
InternetCloseHandle
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 878KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.I6i Size: - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EZN Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rri Size: 10.1MB - Virtual size: 10.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ