Static task
static1
Behavioral task
behavioral1
Sample
47c5c83abdb50018f04fbff4052f896c043d39125272a65372aeaf6dafe8be20.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
47c5c83abdb50018f04fbff4052f896c043d39125272a65372aeaf6dafe8be20.exe
Resource
win10v2004-20240226-en
General
-
Target
47c5c83abdb50018f04fbff4052f896c043d39125272a65372aeaf6dafe8be20
-
Size
6.1MB
-
MD5
583d614725b17f4b9259783e8cf7e20e
-
SHA1
ae4abb53b1e1409455156fd26b984e444383cde8
-
SHA256
47c5c83abdb50018f04fbff4052f896c043d39125272a65372aeaf6dafe8be20
-
SHA512
68863f96ed67d4ac54139320589e8fb328b4fa4511bf219b5461396c92b80de35ec60750ae51b42752ccb9b868b044b8d1967a66a6680d6dace79123395034b1
-
SSDEEP
196608:kNYjEwzh9rdv6sNZIpJ5Vk9BqnVS1wdGvsUHY:kNYAWQVpJP4qVSWdMsSY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 47c5c83abdb50018f04fbff4052f896c043d39125272a65372aeaf6dafe8be20
Files
-
47c5c83abdb50018f04fbff4052f896c043d39125272a65372aeaf6dafe8be20.exe windows:5 windows x86 arch:x86
1edc51b6513d204aaa46fa447d39cb82
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutUnprepareHeader
ws2_32
WSACleanup
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SendDlgItemMessageA
gdi32
PatBlt
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
ChooseColorA
advapi32
RegQueryValueA
shell32
DragQueryFileA
ole32
CLSIDFromString
oleaut32
RegisterTypeLi
comctl32
_TrackMouseEvent
Sections
.text Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 480KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mg# Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.\07 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.F9r Size: 6.0MB - Virtual size: 6.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ