Static task
static1
Behavioral task
behavioral1
Sample
35099bd57710d46f0afc840f2993689e14419cb27197340a148480b839c1c290.exe
Resource
win7-20240708-en
General
-
Target
35099bd57710d46f0afc840f2993689e14419cb27197340a148480b839c1c290
-
Size
11.6MB
-
MD5
39832e13612364d0da95296749266e54
-
SHA1
a102e514f8073cf419e7a78970c077d03481b4c5
-
SHA256
35099bd57710d46f0afc840f2993689e14419cb27197340a148480b839c1c290
-
SHA512
4e7288503bf7107635631d6386db7b00edb266f38ad17ac15eb7e785d11b4e7c217c315de8338c4423f990100c8d4292846db623920c0b322a5cf4d358cb422f
-
SSDEEP
196608:B3zB+9xDlPb1OBWmseVx4oaPENQL4Xu2k4i7st5p+UOfkQjbo:B3zkRBOImVwENQE7s2yXo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35099bd57710d46f0afc840f2993689e14419cb27197340a148480b839c1c290
Files
-
35099bd57710d46f0afc840f2993689e14419cb27197340a148480b839c1c290.exe windows:5 windows x86 arch:x86
4249c4ea315f5357809a1271c31a814e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetMessagePos
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
DragQueryFileA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetImageCount
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseFontA
Sections
.text Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 454KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.#F^ Size: - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nLx Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Hd$ Size: 11.5MB - Virtual size: 11.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ