Static task
static1
Behavioral task
behavioral1
Sample
d0ed5f469b70db9842a1c7972e40792e3d320602b48845d3fac0fe206cf19c38.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d0ed5f469b70db9842a1c7972e40792e3d320602b48845d3fac0fe206cf19c38.exe
Resource
win10v2004-20240802-en
General
-
Target
d0ed5f469b70db9842a1c7972e40792e3d320602b48845d3fac0fe206cf19c38
-
Size
7.1MB
-
MD5
a056727f315e73d1cb2487073b47b1d6
-
SHA1
d3e595a415c3dcb0d7b34ec6a02d747ce409f9f3
-
SHA256
d0ed5f469b70db9842a1c7972e40792e3d320602b48845d3fac0fe206cf19c38
-
SHA512
9d4589a458e34618bb77fe635366faec0bcfaa2e92e6282ecfc80505506f6dcb10ddcd48047910cf1a713b2cfd43949dcf7bcb5d25bbc9eef9709d7ac0a16088
-
SSDEEP
196608:55zC80k6sV7kc/0Iv6oDcxmKRzB5PcbrRv3Xgpu:5Yk6ckc/jv9Ycb1vwu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d0ed5f469b70db9842a1c7972e40792e3d320602b48845d3fac0fe206cf19c38
Files
-
d0ed5f469b70db9842a1c7972e40792e3d320602b48845d3fac0fe206cf19c38.exe windows:4 windows x86 arch:x86
0abd513dc3cc93151913f6e462eb0f3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
socket
rasapi32
RasHangUpA
kernel32
GetFileSize
user32
GetMenu
gdi32
ExtSelectClipRgn
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetImageCount
wininet
InternetCloseHandle
comdlg32
ChooseFontA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 5.8MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 256KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ