Static task
static1
Behavioral task
behavioral1
Sample
6aa70a6cded74c75feb972cffd3cebc01239c5fe0249f427c8ef9af29ab8376a.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
6aa70a6cded74c75feb972cffd3cebc01239c5fe0249f427c8ef9af29ab8376a.exe
Resource
win10v2004-20240802-en
General
-
Target
6aa70a6cded74c75feb972cffd3cebc01239c5fe0249f427c8ef9af29ab8376a
-
Size
4.5MB
-
MD5
867e97681a8efbf651a899ad420e6627
-
SHA1
36a17d46ce06381eec0424baee507ae74ed7a990
-
SHA256
6aa70a6cded74c75feb972cffd3cebc01239c5fe0249f427c8ef9af29ab8376a
-
SHA512
2e8afc1731bd2ffdbbd2de360a4b2dadde591ef2f4a4aeeaf8851ecc6edca1a6908219cab5c8c445d9d7e2cd231256eaf25336b8aa017690a7e93f7b5feb8e18
-
SSDEEP
98304:V4XhkFToE0ZRmIX0LOTyetsbvwIqXpZu/xI+WK2QPKeqzoow+5jUwmCR:VIkFToRbkyQvwIqX4xIT/QPKLEov5ACR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6aa70a6cded74c75feb972cffd3cebc01239c5fe0249f427c8ef9af29ab8376a
Files
-
6aa70a6cded74c75feb972cffd3cebc01239c5fe0249f427c8ef9af29ab8376a.exe windows:4 windows x86 arch:x86
3b1a85c6022b2e2abf0f075d4f53562e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
kernel32
InterlockedCompareExchange
user32
ScrollWindowEx
gdi32
PatBlt
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
comdlg32
GetOpenFileNameW
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
CoGetClassObject
oleaut32
SafeArrayAccessData
comctl32
ImageList_DragLeave
oledlg
ord8
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 3.2MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ