Static task
static1
Behavioral task
behavioral1
Sample
82c56c96aaae4c4e708fb1d761032e70N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
82c56c96aaae4c4e708fb1d761032e70N.exe
Resource
win10v2004-20240709-en
General
-
Target
82c56c96aaae4c4e708fb1d761032e70N.exe
-
Size
8.0MB
-
MD5
82c56c96aaae4c4e708fb1d761032e70
-
SHA1
e2056fc6782fe837aa40ab8df28ac1916c43deba
-
SHA256
ba1d1dedd7cfe78f9ab35190b67dbfb4ce505daca904567e1bcee20abe7d17ea
-
SHA512
0196c21c951309fd2893439d6d48fe9cbae686f014cd52ef6091effd29fd88e87a12d60adca941e29204bbf13a89270bef8adeeb4ec284bce7c3407a38b2e0be
-
SSDEEP
196608:NcYZLrWJZKL3g4XoEE+Ywx65l+pa4ShGpDrEBYQ2k8wGfyQ540VUwJ:NHZrSKTg4X5dcl+paMr08p+b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82c56c96aaae4c4e708fb1d761032e70N.exe
Files
-
82c56c96aaae4c4e708fb1d761032e70N.exe.exe windows:5 windows x86 arch:x86
156b4a887dbde7980167afe136d4004f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSASend
imm32
ImmReleaseContext
shlwapi
wnsprintfA
winmm
mmioOpenA
dinput8
DirectInput8Create
libeay32
ord477
npkcrypt
ord2
fmod
_FSOUND_Reverb_SetProperties@4
kernel32
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
PostMessageA
gdi32
ExtTextOutW
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
oleaut32
SafeArrayCreateVector
wininet
InternetOpenA
avifil32
AVIStreamGetFrameClose
iphlpapi
GetNetworkParams
dbghelp
MiniDumpWriteDump
version
GetFileVersionInfoSizeA
netapi32
NetApiBufferFree
d3d9
Direct3DCreate9
Sections
.text Size: - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 63.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.NbY Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.+h~ Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tTj Size: 7.8MB - Virtual size: 7.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ