Static task
static1
Behavioral task
behavioral1
Sample
07b7e698a6c095ea37f33ce076165dcc98c06000b5f77c96e71ee02c50d611c7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
07b7e698a6c095ea37f33ce076165dcc98c06000b5f77c96e71ee02c50d611c7.exe
Resource
win10v2004-20240802-en
General
-
Target
07b7e698a6c095ea37f33ce076165dcc98c06000b5f77c96e71ee02c50d611c7
-
Size
10.7MB
-
MD5
33135cea8071e61fa0dcf25cff4e8d0d
-
SHA1
dad256f00e46883dcb77534861e2817ca95a14bc
-
SHA256
07b7e698a6c095ea37f33ce076165dcc98c06000b5f77c96e71ee02c50d611c7
-
SHA512
c1ed201cbc93a003f807bc3212ccc9ffa593743eb4888138a0a4b4832278d3be6335edc49f4e3be18c03d00ff5a929290fdcf8f5f3d11490e6ca5c8a51f4b915
-
SSDEEP
196608:vwq+WRi+xbOBxe11zobPHpHNEU2mXmAOLu13gt/wYvGbx6pCJvkZcl:vwqa+xyKzobPHp/pmpNVO96Mh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07b7e698a6c095ea37f33ce076165dcc98c06000b5f77c96e71ee02c50d611c7
Files
-
07b7e698a6c095ea37f33ce076165dcc98c06000b5f77c96e71ee02c50d611c7.exe windows:5 windows x86 arch:x86
889984feed4736e132d41fa2356a9ce4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetConnectStatusA
winmm
midiStreamOpen
ws2_32
WSAStartup
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
FindWindowExA
gdi32
LineTo
msimg32
GradientFill
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
OleRun
oleaut32
SafeArrayGetElement
comctl32
ImageList_GetIcon
wininet
InternetCloseHandle
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 880KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 446KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tvmp0 Size: - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
tvmp1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tvmp2 Size: 10.6MB - Virtual size: 10.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ