Static task
static1
Behavioral task
behavioral1
Sample
859870a682321ecd173e0165232db99db399bf2061e098e065f7fc6360c1ca0a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
859870a682321ecd173e0165232db99db399bf2061e098e065f7fc6360c1ca0a.exe
Resource
win10v2004-20240802-en
General
-
Target
859870a682321ecd173e0165232db99db399bf2061e098e065f7fc6360c1ca0a
-
Size
12.5MB
-
MD5
fa3be1520e4085358ac87e18cb392b79
-
SHA1
9ac9bf660ef6b5b6968092eb7f791e8a3363a1d2
-
SHA256
859870a682321ecd173e0165232db99db399bf2061e098e065f7fc6360c1ca0a
-
SHA512
9b17f7ac8a0711b02b499f08cab700abc9afdb6cb78d8b845954f25934c728f69f2a9dfef8fcc0a2c6c2b2337aece159b925058d59a3d96b9a00b6db7f2be4fe
-
SSDEEP
393216:GCXrIFF0cFZwNTl8FrgpUUTMqAXDae5X7:GCbIFTyJ8Zg02OX7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 859870a682321ecd173e0165232db99db399bf2061e098e065f7fc6360c1ca0a
Files
-
859870a682321ecd173e0165232db99db399bf2061e098e065f7fc6360c1ca0a.exe windows:6 windows x86 arch:x86
73070eea0b9fcff43069b874f475996f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetRect
gdi32
CreatePatternBrush
msimg32
AlphaBlend
winspool.drv
ClosePrinter
advapi32
RegSetValueExW
shell32
DragQueryFileW
comctl32
InitCommonControlsEx
shlwapi
PathStripToRootW
uxtheme
GetThemeSysColor
ole32
OleTranslateAccelerator
oleaut32
VariantChangeType
oledlg
OleUIBusyW
winmm
PlaySoundW
ws2_32
recv
gdiplus
GdipCreateBitmapFromScan0
oleacc
AccessibleObjectFromWindow
imm32
ImmReleaseContext
Sections
.text Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 334KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nu_ Size: - Virtual size: 7.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.>cX Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.U>B Size: 12.4MB - Virtual size: 12.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ