Static task
static1
Behavioral task
behavioral1
Sample
408494758a90370ba7b96e17f9fdfb436437b0917b6c459dc7fbe329ed5a0f6b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
408494758a90370ba7b96e17f9fdfb436437b0917b6c459dc7fbe329ed5a0f6b.exe
Resource
win10v2004-20240802-en
General
-
Target
408494758a90370ba7b96e17f9fdfb436437b0917b6c459dc7fbe329ed5a0f6b
-
Size
9.1MB
-
MD5
06fe0bc7eb57f6219ac02a3979b0ca24
-
SHA1
34a81d303583e34c051a5ab02dd57bb9163771ce
-
SHA256
408494758a90370ba7b96e17f9fdfb436437b0917b6c459dc7fbe329ed5a0f6b
-
SHA512
38783e2e895c58952d7c8d68c6d6efdd1eaddb3553a09d3b9825d82d34db29938e783ba5e0be03ebb699a590c7a21d98550ea18cd487813fb2d9f6211977eb59
-
SSDEEP
196608:2QYIP0hmM8y3tRGUdTHjGGO+LJDrKVgyuSSby7+pcb/W+Dv:2Qnem3ItRGUNHjTrP6SG+pH+Dv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 408494758a90370ba7b96e17f9fdfb436437b0917b6c459dc7fbe329ed5a0f6b
Files
-
408494758a90370ba7b96e17f9fdfb436437b0917b6c459dc7fbe329ed5a0f6b.exe windows:4 windows x86 arch:x86
989c2589e71957286e83691c1b82e386
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
CreateSemaphoreA
user32
KillTimer
gdi32
PtVisible
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
CoGetClassObject
oleaut32
VariantTimeToSystemTime
comctl32
ord17
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 8.0MB - Virtual size: 10.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1024KB - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ