Static task
static1
Behavioral task
behavioral1
Sample
8856a1c189a6154c2326e8b101c0bfb2ff454bf0d3d5555007ce03e61489bd2d.exe
Resource
win7-20240221-en
General
-
Target
8856a1c189a6154c2326e8b101c0bfb2ff454bf0d3d5555007ce03e61489bd2d
-
Size
11.7MB
-
MD5
4df899ea18dd0ce509cac4f116332c37
-
SHA1
3e66437db6b2239a8e5f2c21811122970aaf5976
-
SHA256
8856a1c189a6154c2326e8b101c0bfb2ff454bf0d3d5555007ce03e61489bd2d
-
SHA512
245f5b3b2fd2cde76f9cabf040ab65400d65e7d5ac416c3a74a732ffa22af48848ecbe444941067f298f8c54d09bd0372cd95cfb05f570f94b897159f8d19416
-
SSDEEP
196608:zm+sg2I+7Oj8EzH7cWHp6ojG6Y1o0NeZt872qqIN1xuONY0+MqfC:zTt+7OQEUWonAZ+75fXH+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8856a1c189a6154c2326e8b101c0bfb2ff454bf0d3d5555007ce03e61489bd2d
Files
-
8856a1c189a6154c2326e8b101c0bfb2ff454bf0d3d5555007ce03e61489bd2d.exe windows:5 windows x86 arch:x86
3f2406f1ffb1f8e66db0a71fed5ca1e2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamClose
ws2_32
ntohl
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ScrollWindowEx
gdi32
PatBlt
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetImageCount
Sections
.text Size: - Virtual size: 769KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.B#B Size: - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.EXp Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.(c6 Size: 11.6MB - Virtual size: 11.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ