Static task
static1
Behavioral task
behavioral1
Sample
14406923a61d0d8a1d2ea88d44b35650a1c026b5165b924af99bf498110790bd.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
14406923a61d0d8a1d2ea88d44b35650a1c026b5165b924af99bf498110790bd.exe
Resource
win10v2004-20240426-en
General
-
Target
14406923a61d0d8a1d2ea88d44b35650a1c026b5165b924af99bf498110790bd
-
Size
7.0MB
-
MD5
e31bbc323f0bd30f9557699c9d186609
-
SHA1
79a1b5f96f376791873aa2f55de77de5f7adb94b
-
SHA256
14406923a61d0d8a1d2ea88d44b35650a1c026b5165b924af99bf498110790bd
-
SHA512
760df03e1609d8033c6d44edcffef6b64895b4d3b41deadd262abdf0a82d871dc4c54cff523074a27e1ffd3d630a7b9f9c73f519947dc8b0a30b0c0270381985
-
SSDEEP
196608:ojFtweHTKgJMzKt1uP/2ReHWyyYE7fWU1Vk1+N3:GF+yTKE2/2Re2eECyY+N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14406923a61d0d8a1d2ea88d44b35650a1c026b5165b924af99bf498110790bd
Files
-
14406923a61d0d8a1d2ea88d44b35650a1c026b5165b924af99bf498110790bd.exe windows:5 windows x86 arch:x86
2edd36c374f3f726b150883fb8a9c12a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetCursorPos
CharUpperBuffW
gdi32
ScaleWindowExtEx
winmm
waveOutRestart
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantCopy
comctl32
ord17
ws2_32
ntohl
wininet
InternetReadFile
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 750KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.=hW Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.fl! Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.h6v Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ