Static task
static1
Behavioral task
behavioral1
Sample
96b272e90c61c968bbf5187a4e681aa87f55a01e21496c5b517e73f796550689.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
96b272e90c61c968bbf5187a4e681aa87f55a01e21496c5b517e73f796550689.exe
Resource
win10v2004-20240508-en
General
-
Target
96b272e90c61c968bbf5187a4e681aa87f55a01e21496c5b517e73f796550689
-
Size
8.0MB
-
MD5
7adbc88cecc85b1a5e96c63d3eff00e9
-
SHA1
907c7e9f9a487eabe435c67766c6176e8507c6c9
-
SHA256
96b272e90c61c968bbf5187a4e681aa87f55a01e21496c5b517e73f796550689
-
SHA512
ca08e18c182af9f70dc512caf0257d3f023048593424dd7255d41bb2d71297beca779cd9c5ba827ce07431530d8ca1d8d7cf1078d7bdb8632279f4cc4634ca9e
-
SSDEEP
196608:mzO0zP4PSS50+aDQzw6Dqs/y+cNBKbQ4hrivR/yR4/WdZ0Nys:CO0TMHU69a+c684BARyrd+Is
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 96b272e90c61c968bbf5187a4e681aa87f55a01e21496c5b517e73f796550689
Files
-
96b272e90c61c968bbf5187a4e681aa87f55a01e21496c5b517e73f796550689.exe windows:4 windows x86 arch:x86
432fc55f13f2f44d1365d832cb8bcac4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
rasapi32
RasHangUpA
winmm
midiStreamRestart
ws2_32
select
user32
GetClipboardData
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
SHGetSpecialFolderPathA
ole32
CoGetClassObject
oleaut32
SafeArrayAccessData
comctl32
ImageList_Create
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
.text Size: 2.3MB - Virtual size: 7.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 207KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE