Static task
static1
Behavioral task
behavioral1
Sample
605f239bab36f292f7b07fece33c3bc3f08a7f8467b09a90be0372180e642e69.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
605f239bab36f292f7b07fece33c3bc3f08a7f8467b09a90be0372180e642e69.exe
Resource
win10v2004-20240426-en
General
-
Target
605f239bab36f292f7b07fece33c3bc3f08a7f8467b09a90be0372180e642e69
-
Size
1.7MB
-
MD5
7f7a3881405c62e5321ddc00a079b2eb
-
SHA1
fcd26638364ba66698ba5a38b2428d97dae78feb
-
SHA256
605f239bab36f292f7b07fece33c3bc3f08a7f8467b09a90be0372180e642e69
-
SHA512
2b699b09e62724bbeaf4fed66ea22be4d8ebcc29db4addf290fa6e89df5e1026c2a275ae9c78f57b07c6e752c6da50c5389c32082fc5905ebb5bc38183a8d794
-
SSDEEP
24576:uibX+DAYmGd3VGn0lnQP+O9dTD6T7ZI42gXnJN0aOhvZjwMi+3N7tC7Fyl7Vd71t:uVQPpD6T7xpJkRwMlx1pVdFwdpk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 605f239bab36f292f7b07fece33c3bc3f08a7f8467b09a90be0372180e642e69
Files
-
605f239bab36f292f7b07fece33c3bc3f08a7f8467b09a90be0372180e642e69.exe windows:4 windows x86 arch:x86
003a50b24de3b01f8ef5cb82e6822f4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
EnterCriticalSection
user32
ChildWindowFromPointEx
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 616KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ