Static task
static1
Behavioral task
behavioral1
Sample
44f26df6488cdde227d20f60f402ef42bc379d3436058249af449bc0b3ceb1e1.exe
Resource
win7-20240704-en
General
-
Target
44f26df6488cdde227d20f60f402ef42bc379d3436058249af449bc0b3ceb1e1
-
Size
13.7MB
-
MD5
0a8c6947f30e0452e7f3f80db96c2544
-
SHA1
ff7995220b59f18271d9e70784312127548e73df
-
SHA256
44f26df6488cdde227d20f60f402ef42bc379d3436058249af449bc0b3ceb1e1
-
SHA512
9b25102eb4612e07a2b4f92714bc645ba66157a0063821e6e236396022e2d41a5548e2c73918bc9d73b6afe58f9f44a3553d2981e60b5cb6d7bb200b41eef78a
-
SSDEEP
196608:zL9lpg4ieZUlGyNJXLn7v/Iw3otOKxvYTJvhJRZXtmiS+0ChrP2K1jSzYNNcs24d:HVtirG2Jz7eeJvhtURGh3CYNuT40W2o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44f26df6488cdde227d20f60f402ef42bc379d3436058249af449bc0b3ceb1e1
Files
-
44f26df6488cdde227d20f60f402ef42bc379d3436058249af449bc0b3ceb1e1.exe windows:5 windows x86 arch:x86
beb3fd36c426f4049fa3fdb7e25f7220
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutReset
ws2_32
recvfrom
rasapi32
RasGetConnectStatusA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
ScrollWindowEx
gdi32
GetObjectA
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetDim
comctl32
_TrackMouseEvent
wininet
HttpQueryInfoA
Sections
.text Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 537KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.&d[ Size: - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.iMW Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.{iI Size: 13.5MB - Virtual size: 13.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 152KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ