Static task
static1
Behavioral task
behavioral1
Sample
28600d43bdafc33b0ca3040e52da8e04c1a2273e65d2459103d6ecfbf9e92e7a.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
28600d43bdafc33b0ca3040e52da8e04c1a2273e65d2459103d6ecfbf9e92e7a.exe
Resource
win10v2004-20240709-en
General
-
Target
28600d43bdafc33b0ca3040e52da8e04c1a2273e65d2459103d6ecfbf9e92e7a
-
Size
3.9MB
-
MD5
5af79cadcff3a762a8f6903eb9f8be0e
-
SHA1
35cb767273b8248da5de54422a1a20c80d48ebdb
-
SHA256
28600d43bdafc33b0ca3040e52da8e04c1a2273e65d2459103d6ecfbf9e92e7a
-
SHA512
d9987e7dfe8386e0db357cf98014158775c4b9e43a05f43641639bc7044ca3373e9886dffcc1b4dff6dcd4ab9ecd4b818e06c6210d55e706d76e64a845ca78a4
-
SSDEEP
98304:rzTtN5bA97eGoTBAuwj2zbBz3JT0ZHFIx8xpiu7LlY8K30:rzJN5c7eG6BAuwYFOFFIQsu7LlS30
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28600d43bdafc33b0ca3040e52da8e04c1a2273e65d2459103d6ecfbf9e92e7a
Files
-
28600d43bdafc33b0ca3040e52da8e04c1a2273e65d2459103d6ecfbf9e92e7a.exe windows:4 windows x86 arch:x86
573790c406dc78368f3992024ecfb1cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
user32
WaitForInputIdle
gdi32
GetClipRgn
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleUninitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recv
comdlg32
GetFileTitleA
secur32
GetUserNameExA
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE