Static task
static1
Behavioral task
behavioral1
Sample
aac94b55f6bae9611f906d33e293a49eb24338b6f76f999109f631d4384ea470.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
aac94b55f6bae9611f906d33e293a49eb24338b6f76f999109f631d4384ea470.exe
Resource
win10v2004-20240508-en
General
-
Target
aac94b55f6bae9611f906d33e293a49eb24338b6f76f999109f631d4384ea470
-
Size
7.2MB
-
MD5
48edc3517d31c3eba4cc58e350b864bc
-
SHA1
6cb7112fb42cd17f29aeb5f384deba7e2ac8ca8f
-
SHA256
aac94b55f6bae9611f906d33e293a49eb24338b6f76f999109f631d4384ea470
-
SHA512
f414e405e1d963329e1801c851e0660b71b2c171925f4b383c1dfbb713fec7fd1e92fabb491fefe03b58583b6b3bdc1d99dccfb8cfee6397437cdea4142f69bc
-
SSDEEP
196608:/DZsIGgbQtz58sulJQh9aVnnXxrEELIInfQ2xctlH5FM40n:/FZGPzibQh9GnnXxRON
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aac94b55f6bae9611f906d33e293a49eb24338b6f76f999109f631d4384ea470
Files
-
aac94b55f6bae9611f906d33e293a49eb24338b6f76f999109f631d4384ea470.exe windows:5 windows x86 arch:x86
304d048453a4b96ebce1ba027175c15a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
iphlpapi
GetAdaptersInfo
winmm
waveOutRestart
ws2_32
inet_ntoa
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ScrollWindowEx
CharUpperBuffW
gdi32
Arc
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
PrintDlgA
advapi32
RegEnumValueA
shell32
SHGetSpecialFolderPathA
ole32
CoLockObjectExternal
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Draw
Sections
.text Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
./dP Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.upE Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.{oh Size: 7.2MB - Virtual size: 7.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ