Static task
static1
Behavioral task
behavioral1
Sample
164dc1eabab931c3e6c417c45eefcbf25febf7af20b5f13829ad02f651be9ec9.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
164dc1eabab931c3e6c417c45eefcbf25febf7af20b5f13829ad02f651be9ec9.exe
Resource
win10v2004-20240802-en
General
-
Target
164dc1eabab931c3e6c417c45eefcbf25febf7af20b5f13829ad02f651be9ec9
-
Size
12.5MB
-
MD5
a5faa56e4512f206877a93291fb6ffdd
-
SHA1
51119775489a57ccd381c4094cc967bde2ab20bf
-
SHA256
164dc1eabab931c3e6c417c45eefcbf25febf7af20b5f13829ad02f651be9ec9
-
SHA512
f08a603c5dca1048b99b523aeb14806fed6387626cac5096f4135b20a8b044a58e170fc2bd702d8b66dc7e7c61a4924fbf0888dc125df33906843fba6ea15355
-
SSDEEP
196608:Bkd2WiaFCCCoptAD+TkYRih7LB5UxkXj5HqFTzjcIzcwOzFoViL7vvd4KsUxRgF4:Bkd7FCC1KD4ZIX5aRsmVIOym
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 164dc1eabab931c3e6c417c45eefcbf25febf7af20b5f13829ad02f651be9ec9
Files
-
164dc1eabab931c3e6c417c45eefcbf25febf7af20b5f13829ad02f651be9ec9.exe windows:5 windows x86 arch:x86
a5ed0100b71fd0c5517ece9ed837d7f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
gethostbyname
winmm
mixerGetLineInfoA
version
GetFileVersionInfoA
comctl32
ImageList_Create
psapi
GetModuleBaseNameA
wininet
InternetOpenA
kernel32
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SetWindowTextW
gdi32
GetPixel
comdlg32
CommDlgExtendedError
advapi32
RegDeleteKeyA
shell32
DragQueryPoint
ole32
OleInitialize
oleaut32
SafeArrayGetLBound
Sections
.text Size: - Virtual size: 607KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9gV Size: - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.SVMP Size: - Virtual size: 2.4MB
IMAGE_SCN_MEM_EXECUTE
.y!1 Size: - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.yCO Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i+u Size: 12.4MB - Virtual size: 12.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ