Static task
static1
Behavioral task
behavioral1
Sample
9b87be8a5685672fc63ab2c04fb1ef4b5f164182654f56e8168851aaef7c8332.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
9b87be8a5685672fc63ab2c04fb1ef4b5f164182654f56e8168851aaef7c8332.exe
Resource
win10v2004-20240426-en
General
-
Target
9b87be8a5685672fc63ab2c04fb1ef4b5f164182654f56e8168851aaef7c8332
-
Size
7.2MB
-
MD5
9dafefd860452b74bf953bfbf1cb3008
-
SHA1
d9bdd54849e4096898f231b943abf6e7c042f9c4
-
SHA256
9b87be8a5685672fc63ab2c04fb1ef4b5f164182654f56e8168851aaef7c8332
-
SHA512
152319dc1ca9c479c30d55eaaedeb958ac778b5702136d6801c11d6bcc494dd901e5e655dd40a64835f7d6afe72b6544678555b7129f1aa22e445530211d0159
-
SSDEEP
196608:wx/Bz0XyrqiM0Qh/VzJpQkSInjDmWpw3rOSZ:c/d0irqp0QxVzJQyPpw3rOSZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9b87be8a5685672fc63ab2c04fb1ef4b5f164182654f56e8168851aaef7c8332
Files
-
9b87be8a5685672fc63ab2c04fb1ef4b5f164182654f56e8168851aaef7c8332.exe windows:4 windows x86 arch:x86
c35d1fbc996e4096bb145070ac9ed52b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
SetLastError
user32
IsIconic
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetImageCount
comdlg32
ChooseFontA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 6.0MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1016KB - Virtual size: 1016KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ