Static task
static1
Behavioral task
behavioral1
Sample
9ea0274f683b366c749417b180a861028be127d12ce6492d757fb9d32ae8679b.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9ea0274f683b366c749417b180a861028be127d12ce6492d757fb9d32ae8679b.exe
Resource
win10v2004-20240802-en
General
-
Target
9ea0274f683b366c749417b180a861028be127d12ce6492d757fb9d32ae8679b
-
Size
6.9MB
-
MD5
30305bad9e72d3670c5c03e4bf0344ab
-
SHA1
c7a96e962a5ed119ac680ac847559147c0aaf293
-
SHA256
9ea0274f683b366c749417b180a861028be127d12ce6492d757fb9d32ae8679b
-
SHA512
196bb8d0ba71060521a561fc64a2b6084e2c5fa53a35958e88ad250c97e3f4860e89941100738bb10e049a80b8a2f9b70be9aa127f7d7303399bb0540c6ff9c3
-
SSDEEP
196608:YYgHypM2q9jVtaAxHLlkotkYNnFhBkla3FrocNf8duVgRPC:YYgypM2qXtaeXelgUnIr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9ea0274f683b366c749417b180a861028be127d12ce6492d757fb9d32ae8679b
Files
-
9ea0274f683b366c749417b180a861028be127d12ce6492d757fb9d32ae8679b.exe windows:4 windows x86 arch:x86
eb577faeb150a7d3950f29090ff965be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
winmm
midiStreamStop
ws2_32
htons
user32
EnableMenuItem
gdi32
ExcludeClipRect
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
CryptReleaseContext
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetImageInfo
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 646KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 5.1MB - Virtual size: 13.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 401KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asp Size: 775KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ