Static task
static1
Behavioral task
behavioral1
Sample
4b006b980e93394270a3db8d1e8238851b068dfff964c454c43cb9ad6b77a87d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4b006b980e93394270a3db8d1e8238851b068dfff964c454c43cb9ad6b77a87d.exe
Resource
win10v2004-20240611-en
General
-
Target
4b006b980e93394270a3db8d1e8238851b068dfff964c454c43cb9ad6b77a87d
-
Size
14.2MB
-
MD5
487fe1d7641a9932f0a5da394846fa59
-
SHA1
72b298eb7651fe614fc93065f86b8f15f46da1dc
-
SHA256
4b006b980e93394270a3db8d1e8238851b068dfff964c454c43cb9ad6b77a87d
-
SHA512
a807724a7a1039074362a91d9580e15bb7b1e633b68614a35dfc9bf4fc370fd8b54b7b42cc22bb1c1dfb50194d802dfb5be80ffef038efccfe9bc3716cf8772a
-
SSDEEP
393216:6t/S/jn4gRFrk77pizNWRBUo0f7SjCRF+G2KI:OCjn4MFrk7UEwdfS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4b006b980e93394270a3db8d1e8238851b068dfff964c454c43cb9ad6b77a87d
Files
-
4b006b980e93394270a3db8d1e8238851b068dfff964c454c43cb9ad6b77a87d.exe windows:4 windows x86 arch:x86
96cf71f25b1d3c5e4c7ea90b52819bc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
closesocket
kernel32
GetSystemInfo
user32
GetActiveWindow
gdi32
Escape
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
VariantChangeType
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 956KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 343KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 4.8MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 7.7MB - Virtual size: 7.7MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 548KB - Virtual size: 545KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 5.6MB - Virtual size: 5.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 12KB - Virtual size: 10KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp6 Size: 388KB - Virtual size: 386KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE