Static task
static1
Behavioral task
behavioral1
Sample
a30cdf8bf2f0ed55f8fa2555c234ff7769773275cddc122ce96e70d10c817192.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a30cdf8bf2f0ed55f8fa2555c234ff7769773275cddc122ce96e70d10c817192.exe
Resource
win10v2004-20240611-en
General
-
Target
a30cdf8bf2f0ed55f8fa2555c234ff7769773275cddc122ce96e70d10c817192
-
Size
379KB
-
MD5
cc6858cfb71bcd26a7bb6f1f66fc6148
-
SHA1
c61151f1cacf42e9418321b017070fd7c3ee2394
-
SHA256
a30cdf8bf2f0ed55f8fa2555c234ff7769773275cddc122ce96e70d10c817192
-
SHA512
f55e09ec1f22d03d01ba24809c9b6ad099362881263a231cc4e35801df4fb67d47e0c11753cad37f9f832ec8ec6310eaf7c37f714612014107f558c8b3f4c646
-
SSDEEP
6144:768VjEiTc/9j3Ba+76TgGaLkSxkvMA4mM4xuXIdz1pdE0:KR/9laXTgPL9ALE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a30cdf8bf2f0ed55f8fa2555c234ff7769773275cddc122ce96e70d10c817192
Files
-
a30cdf8bf2f0ed55f8fa2555c234ff7769773275cddc122ce96e70d10c817192.exe windows:4 windows x86 arch:x86
0de57815f14c84ad3da08ee1a9781721
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
winmm
waveOutOpen
ws2_32
WSACleanup
user32
GetDC
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.MPRESS1 Size: 304KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE