Static task
static1
Behavioral task
behavioral1
Sample
aed13bdc30060246b0c874227ef9d7ad43906cd226c4109aff0925f62cc0ac55.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aed13bdc30060246b0c874227ef9d7ad43906cd226c4109aff0925f62cc0ac55.exe
Resource
win10v2004-20240802-en
General
-
Target
aed13bdc30060246b0c874227ef9d7ad43906cd226c4109aff0925f62cc0ac55
-
Size
5.0MB
-
MD5
7ede7f0bf031ee803b36def3de08109e
-
SHA1
24687d26029bd978f03a2da83e9e37fe938bc7ea
-
SHA256
aed13bdc30060246b0c874227ef9d7ad43906cd226c4109aff0925f62cc0ac55
-
SHA512
efefc221c2162d7c61a612df8ee561e5b7b75cab71f689e01b31c097128d07cd9cd34e9ecb4a994eba9699acda038102fbeaee28d5de815824e987456b30eb5a
-
SSDEEP
98304:sh4TYp9oNqGO+t7g98/T2VLgBq/p2zt1hErlH7oeipNY45f+RuuRLIy:g4IHG1c9o2tBB2DhQHipxfNuNI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aed13bdc30060246b0c874227ef9d7ad43906cd226c4109aff0925f62cc0ac55
Files
-
aed13bdc30060246b0c874227ef9d7ad43906cd226c4109aff0925f62cc0ac55.exe windows:5 windows x86 arch:x86
0795bcf37d7f51bae289261f7525a521
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ShowWindow
gdi32
LineTo
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetIcon
wininet
InternetCloseHandle
comdlg32
ChooseFontA
Sections
.text Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 527KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp0 Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.svmp1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ