Static task
static1
Behavioral task
behavioral1
Sample
b4d222eef84df5fc402404d33b313b6fc93cc8c89365a597fffd8dece51ced40.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b4d222eef84df5fc402404d33b313b6fc93cc8c89365a597fffd8dece51ced40.exe
Resource
win10v2004-20240802-en
General
-
Target
b4d222eef84df5fc402404d33b313b6fc93cc8c89365a597fffd8dece51ced40
-
Size
3.3MB
-
MD5
a754227d167d0baba1aa48d8a58f5c32
-
SHA1
1b12c5eedda67a40157bd8c211ec63c2ea5732ca
-
SHA256
b4d222eef84df5fc402404d33b313b6fc93cc8c89365a597fffd8dece51ced40
-
SHA512
be3e5bf9878109d40a7cecc049bc23d41a2453990d4d1c414fa47c979e4616470daf214bff5d480c441fae30ea142c12586392476a2fbddf1575c39d51056ad9
-
SSDEEP
49152:skQeuMHSphl4vpLXdmq3yDAqw79BCT4h9x1Yjin0NQD0dZy7Myftr7yC1L:TQeIHlSdmq/39BD9xmji0WD0dZy7LvL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b4d222eef84df5fc402404d33b313b6fc93cc8c89365a597fffd8dece51ced40
Files
-
b4d222eef84df5fc402404d33b313b6fc93cc8c89365a597fffd8dece51ced40.exe windows:4 windows x86 arch:x86
e2355da9192bf18a611d7826d3f66402
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundA
ws2_32
inet_ntoa
version
GetFileVersionInfoA
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
rasapi32
RasGetConnectStatusA
kernel32
GetTimeZoneInformation
user32
GetMenuCheckMarkDimensions
gdi32
CreateBrushIndirect
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
GetUserNameA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ImageList_Destroy
wldap32
ord29
wininet
InternetOpenA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.5MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 752KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ