Static task
static1
Behavioral task
behavioral1
Sample
d0a0e09722f2d07173709d9572913c9a0345121c6f1101e75eb0b4577ffdbaaa.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d0a0e09722f2d07173709d9572913c9a0345121c6f1101e75eb0b4577ffdbaaa.exe
Resource
win10v2004-20240802-en
General
-
Target
d0a0e09722f2d07173709d9572913c9a0345121c6f1101e75eb0b4577ffdbaaa
-
Size
13.8MB
-
MD5
7de6c58119022636f90188c34fd3e2e6
-
SHA1
ab14d36c9dc441d2cf87373584aec8ebb80a4f4a
-
SHA256
d0a0e09722f2d07173709d9572913c9a0345121c6f1101e75eb0b4577ffdbaaa
-
SHA512
9478bb2ba377ae25647da2e3d21c46ba938e23d67abf9014bf6f1ad612a59fedeb073af444ac261533dee848c8c1412d9e06a2065aea0023fba0b09b8d495852
-
SSDEEP
393216:/5Z84SQSJQL7q9U60LIK3OJUtqSzX0Gq:7WQbLor2JX0G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0a0e09722f2d07173709d9572913c9a0345121c6f1101e75eb0b4577ffdbaaa
Files
-
d0a0e09722f2d07173709d9572913c9a0345121c6f1101e75eb0b4577ffdbaaa.exe windows:5 windows x86 arch:x86
4a3e5131fbb8de4ca2692170189a1372
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasHangUpA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
TranslateAcceleratorA
gdi32
LineTo
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Draw
wininet
InternetCloseHandle
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 595KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 456KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text0 Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text2 Size: 13.8MB - Virtual size: 13.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ