Static task
static1
Behavioral task
behavioral1
Sample
65fbdd37ef40a943218e39a8404fd165fb67de11d6012d4a3ec4139275883c5f.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
65fbdd37ef40a943218e39a8404fd165fb67de11d6012d4a3ec4139275883c5f.exe
Resource
win10v2004-20240802-en
General
-
Target
65fbdd37ef40a943218e39a8404fd165fb67de11d6012d4a3ec4139275883c5f
-
Size
11.6MB
-
MD5
cf953e9cf53f02cad37859f09af3ac2f
-
SHA1
c3cd2e20856ad31a524b7090eecc44b95742dd95
-
SHA256
65fbdd37ef40a943218e39a8404fd165fb67de11d6012d4a3ec4139275883c5f
-
SHA512
0665042731de564f1dbb020f7a6c2700e8a51dadcf59bf0ca5d910926b46223d97460b6fca5da1b19ed399fb5536a0f7e44192c61379abe4cae61b849c3cd51d
-
SSDEEP
196608:JsmCsxKtlh8VM0vIMCz74MATrOR3vgWqsg43oTstG/7YQYttS15GZNTtpkO6J//S:JsiMEzvIrUxSdgWh3oc87YQYtg5GZ/Sn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 65fbdd37ef40a943218e39a8404fd165fb67de11d6012d4a3ec4139275883c5f
Files
-
65fbdd37ef40a943218e39a8404fd165fb67de11d6012d4a3ec4139275883c5f.exe windows:5 windows x86 arch:x86
abbbdb77a78363b3cd67deca8c411a9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiStreamRestart
ws2_32
inet_ntoa
rasapi32
RasHangUpA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetMenuItemBitmaps
CharUpperBuffW
gdi32
RoundRect
winspool.drv
ClosePrinter
comdlg32
PrintDlgA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
ole32
DoDragDrop
oleaut32
UnRegisterTypeLi
comctl32
ord17
wldap32
ord29
wininet
InternetCloseHandle
Sections
.svmp5 Size: - Virtual size: 976KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.svmp5 Size: - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp5 Size: - Virtual size: 431KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp5 Size: - Virtual size: 4.4MB
IMAGE_SCN_MEM_EXECUTE
.svmp5 Size: - Virtual size: 554KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.svmp5 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.svmp5 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 9.2MB - Virtual size: 9.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp5 Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp5 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.svmp5 Size: 548KB - Virtual size: 544KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.svmp5 Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ