Static task
static1
Behavioral task
behavioral1
Sample
7575b4bc8ef7cd8cd9845f46f09f2ea1a955d4b251bfa7e10b08e6c008542a07.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
7575b4bc8ef7cd8cd9845f46f09f2ea1a955d4b251bfa7e10b08e6c008542a07.exe
Resource
win10v2004-20240802-en
General
-
Target
7575b4bc8ef7cd8cd9845f46f09f2ea1a955d4b251bfa7e10b08e6c008542a07
-
Size
8.6MB
-
MD5
811d192af6649d1c7dd26d730e416a67
-
SHA1
3087aae8b596da950e5e004bb928c39f86d732c5
-
SHA256
7575b4bc8ef7cd8cd9845f46f09f2ea1a955d4b251bfa7e10b08e6c008542a07
-
SHA512
cd6864df1d6f68f4b5b7ad809d842ebc98a7e1d4b55b7437c342ad635a650887107362d85959a30152daaa1a4ce716ef4c5d48b59541fb3429074ddd55e7b075
-
SSDEEP
98304:Ub7JBMz9Gytkr8QTAZdBStbA8f1KTiBCLAMjIqAZceGu:Qe9sr8QTAZbSl7wTNM1Puu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7575b4bc8ef7cd8cd9845f46f09f2ea1a955d4b251bfa7e10b08e6c008542a07
Files
-
7575b4bc8ef7cd8cd9845f46f09f2ea1a955d4b251bfa7e10b08e6c008542a07.exe windows:5 windows x86 arch:x86
3505a1be8de2671f79cf900bc5299fe4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
user32
GetMenuItemCount
CharUpperBuffW
gdi32
CreatePalette
winmm
midiStreamRestart
ClosePrinter
OleInitialize
GetFileTitleA
advapi32
RegCloseKey
shell32
ShellExecuteA
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
recvfrom
Sections
T-VMP Size: - Virtual size: 633KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: - Virtual size: 319KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 6.3MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T-VMP Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
T-VMP Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 552KB - Virtual size: 549KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T-VMP Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ