Static task
static1
Behavioral task
behavioral1
Sample
759437d299f78189163c81bf34f740f16bc7629ea25e7b26d9da90114a879264.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
759437d299f78189163c81bf34f740f16bc7629ea25e7b26d9da90114a879264.exe
Resource
win10v2004-20240226-en
General
-
Target
759437d299f78189163c81bf34f740f16bc7629ea25e7b26d9da90114a879264
-
Size
6.6MB
-
MD5
4d94e039800e897dc1b0c0007e3e7447
-
SHA1
8d3956c4094e246287340e2599ccfde0d573b8a0
-
SHA256
759437d299f78189163c81bf34f740f16bc7629ea25e7b26d9da90114a879264
-
SHA512
09602908c3916423fc15b2e16ea6a670c8ee44883586b9c467175c54a2c245f1b8f7f7e428186dd51b33d4e9b5d34b7780821a663f3f72481a1cc3d134745297
-
SSDEEP
196608:tc8L771t/HoM4KtlJ2uyoxB+YYFuCDwUowUgqdoaMZrZeh:tx4ZK52fGJsuCtDUgoO9eh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 759437d299f78189163c81bf34f740f16bc7629ea25e7b26d9da90114a879264
Files
-
759437d299f78189163c81bf34f740f16bc7629ea25e7b26d9da90114a879264.exe windows:5 windows x86 arch:x86
9351da77416cf44d0d3e2c24f0c237fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutPause
ws2_32
ntohl
kernel32
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ScrollWindowEx
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
gdi32
RoundRect
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
OpenProcessToken
shell32
SHBrowseForFolderA
ole32
CLSIDFromProgID
oleaut32
VariantCopyInd
comctl32
ImageList_SetBkColor
wtsapi32
WTSSendMessageW
Sections
.text Size: - Virtual size: 1014KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmps0 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmps1 Size: 6.5MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ