Static task
static1
Behavioral task
behavioral1
Sample
53f53803f7f1f078f1884d719a98fa70b6cec5693e537f78caad232fe95a06ae.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
53f53803f7f1f078f1884d719a98fa70b6cec5693e537f78caad232fe95a06ae.exe
Resource
win10v2004-20240802-en
General
-
Target
53f53803f7f1f078f1884d719a98fa70b6cec5693e537f78caad232fe95a06ae
-
Size
1.4MB
-
MD5
bc7d40b8cd576845ba501b5552d0d481
-
SHA1
cd7067c4d791b951fc0cf243fe4db58dd93ec329
-
SHA256
53f53803f7f1f078f1884d719a98fa70b6cec5693e537f78caad232fe95a06ae
-
SHA512
585424b1ee5733ac6ef7dc1b786620e15f25d76c7fbad7d1fb3a691bdf4121c0ec24be08ef252f1541b25a750016439c279e5895c21f249493ef776afb4440e9
-
SSDEEP
24576:wuzNlVQyF1EWbZh3wmfsZ97EX5PPdJXeoD/gHPPcnvwxCm33u+hQwMqDdva4D4tb:rlme1DbL3BKCdcWovPqIXHu2QQDxa4a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 53f53803f7f1f078f1884d719a98fa70b6cec5693e537f78caad232fe95a06ae
Files
-
53f53803f7f1f078f1884d719a98fa70b6cec5693e537f78caad232fe95a06ae.exe windows:4 windows x86 arch:x86
c99f80c91821612336b0e1df0cb0833e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
iphlpapi
GetAdaptersInfo
winmm
midiStreamProperty
ws2_32
select
kernel32
GetTimeZoneInformation
user32
UpdateWindow
gdi32
RectVisible
winspool.drv
ClosePrinter
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
msvcrt
strncpy
psapi
GetMappedFileNameW
Sections
.text Size: 396KB - Virtual size: 936KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1008KB - Virtual size: 1008KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ