Static task
static1
Behavioral task
behavioral1
Sample
57f01c4b7cb1717ce0fa41d3728c82fa416af40ce5906c6a5c49fa3e9bb687ab.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
57f01c4b7cb1717ce0fa41d3728c82fa416af40ce5906c6a5c49fa3e9bb687ab.exe
Resource
win10v2004-20240704-en
General
-
Target
57f01c4b7cb1717ce0fa41d3728c82fa416af40ce5906c6a5c49fa3e9bb687ab
-
Size
3.0MB
-
MD5
6474835bb2116feb15970b9c74bd8082
-
SHA1
77eb51ae321e4ed55d93f595d2aac0d8893b5b8d
-
SHA256
57f01c4b7cb1717ce0fa41d3728c82fa416af40ce5906c6a5c49fa3e9bb687ab
-
SHA512
d1c6ab811430e053b7d17fa34c85644f81cd3da80a20c394863b5b57da38e3587f9fc0278833d27c3aea03eb7351a076878315db2cb508b43e453cc99be0d5e7
-
SSDEEP
49152:Tozhf2KzJuKnnTn5as/YqJMFWOb8dILu+d+JNJncEsRk3rZNjVPgclhocM5mPCL4:c9fvJnT5as/Yqi0GdN+BncvufVPgclek
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57f01c4b7cb1717ce0fa41d3728c82fa416af40ce5906c6a5c49fa3e9bb687ab
Files
-
57f01c4b7cb1717ce0fa41d3728c82fa416af40ce5906c6a5c49fa3e9bb687ab.exe windows:4 windows x86 arch:x86
89a948d0eb064ad3d17e62995adb6e68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
CreateFileMappingA
user32
ScreenToClient
gdi32
GetViewportExtEx
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ord17
wininet
InternetCloseHandle
comdlg32
ChooseFontA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.9MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ