Static task
static1
Behavioral task
behavioral1
Sample
13e279c9d4e551833a1f7ac1bc03a0c9569a45978beece8e4d03c2eb6d4f1163.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
13e279c9d4e551833a1f7ac1bc03a0c9569a45978beece8e4d03c2eb6d4f1163.exe
Resource
win10v2004-20240802-en
General
-
Target
13e279c9d4e551833a1f7ac1bc03a0c9569a45978beece8e4d03c2eb6d4f1163
-
Size
3.5MB
-
MD5
92d21612e9e3fe67362677acca0c2d48
-
SHA1
628a07f5f37af8f8c7b7beca30220152c83bdc9f
-
SHA256
13e279c9d4e551833a1f7ac1bc03a0c9569a45978beece8e4d03c2eb6d4f1163
-
SHA512
9c8ed58c1872a37fd704e5bd6012e36de37872a4df25b5bb7d513141dd1e57f7398949bba9d564005307992a9b100dda22f0c093d4e839c1ad2734e2feda051b
-
SSDEEP
98304:ENoouQSAiXRLoYM3K7+AiYc+GUMe61qhM+:ENooZwXhOKFiYc1Uj69+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13e279c9d4e551833a1f7ac1bc03a0c9569a45978beece8e4d03c2eb6d4f1163
Files
-
13e279c9d4e551833a1f7ac1bc03a0c9569a45978beece8e4d03c2eb6d4f1163.exe windows:4 windows x86 arch:x86
f7803676789b7644db0647c86f669a8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
midiStreamProperty
ws2_32
inet_ntoa
rasapi32
RasGetConnectStatusA
kernel32
DuplicateHandle
user32
PostThreadMessageA
gdi32
GetStockObject
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
OleFlushClipboard
oleaut32
VariantInit
comctl32
ImageList_EndDrag
oledlg
ord8
wininet
InternetCloseHandle
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.2MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ