Static task
static1
Behavioral task
behavioral1
Sample
7fe8511f1de72f1467f184a9565bd2ea408aa75f7ebc79aae00a97009841ced2.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7fe8511f1de72f1467f184a9565bd2ea408aa75f7ebc79aae00a97009841ced2.exe
Resource
win10v2004-20240426-en
General
-
Target
7fe8511f1de72f1467f184a9565bd2ea408aa75f7ebc79aae00a97009841ced2
-
Size
2.7MB
-
MD5
e6222c963b39bdcbc59eb4818efc9182
-
SHA1
af8f81249deda3fd1aeae4b9a70973821d1863f1
-
SHA256
7fe8511f1de72f1467f184a9565bd2ea408aa75f7ebc79aae00a97009841ced2
-
SHA512
2b788a05f9a051997b03f8048185da0f88d766f962aa8b824468f215a97486e25419dd214b6aa54e342cb7a8e5c7179a0fd4633e211a9b971ce0cb03cb3a8d32
-
SSDEEP
49152:qczkpvL0QXectDlYcWY6KhWyuwpXGugmeuhqBGjwGeZZ55qDrJymQzP2De:Rzk9weJDzWY3tbWuauljwGeZZLqDFylr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fe8511f1de72f1467f184a9565bd2ea408aa75f7ebc79aae00a97009841ced2
Files
-
7fe8511f1de72f1467f184a9565bd2ea408aa75f7ebc79aae00a97009841ced2.exe windows:4 windows x86 arch:x86
de50125f163bb85d4eecaa306ee44ad3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiStreamClose
ws2_32
inet_ntoa
kernel32
SuspendThread
user32
CheckMenuItem
gdi32
CreateFontIndirectA
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
PrintDlgA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CoLockObjectExternal
oleaut32
VariantChangeType
comctl32
ImageList_AddMasked
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.2MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ