Static task
static1
Behavioral task
behavioral1
Sample
2a32d903994748683660e26244b68d52fd1eae8df85ac927891031c9a05ca1ee.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2a32d903994748683660e26244b68d52fd1eae8df85ac927891031c9a05ca1ee.exe
Resource
win10v2004-20240508-en
General
-
Target
2a32d903994748683660e26244b68d52fd1eae8df85ac927891031c9a05ca1ee
-
Size
9.1MB
-
MD5
6935e65a49bc5dea3e29026952e96928
-
SHA1
5f0d17b8767277bf6c7052deb1fe35000d372647
-
SHA256
2a32d903994748683660e26244b68d52fd1eae8df85ac927891031c9a05ca1ee
-
SHA512
90e7bcfda5ff11b9630180d3b001020b7e5dfa3ba8f36b07cc11c1751bf4441e2c273a1f47e58d0685e338179ca305683657b35e558cb90cee733ffa58b637b2
-
SSDEEP
196608:imxqKSvx5u7ywkdlFsa+XAsrq2bY5EkjUn482BD:Y3u7yLdlFn+XAsfA/jUnr29
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a32d903994748683660e26244b68d52fd1eae8df85ac927891031c9a05ca1ee
Files
-
2a32d903994748683660e26244b68d52fd1eae8df85ac927891031c9a05ca1ee.exe windows:5 windows x86 arch:x86
40e3a774efd64192bbd496d0450db437
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
socket
rasapi32
RasHangUpA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ChildWindowFromPointEx
CharUpperBuffW
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetImageCount
wininet
InternetCanonicalizeUrlA
comdlg32
GetFileTitleA
Sections
T-VMP Size: - Virtual size: 1004KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 527KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 552KB - Virtual size: 548KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ