Static task
static1
Behavioral task
behavioral1
Sample
b9c5b5a68082cb5c6b09d185febd6900ffc6ccfdc4fd3516d142647b3d2440e9.exe
Resource
win7-20240903-en
General
-
Target
b9c5b5a68082cb5c6b09d185febd6900ffc6ccfdc4fd3516d142647b3d2440e9
-
Size
10.7MB
-
MD5
9bcdaade7a361897140d6ba1e2456b5f
-
SHA1
3b9a6642d5af40d278d0953c952690dc8f440498
-
SHA256
b9c5b5a68082cb5c6b09d185febd6900ffc6ccfdc4fd3516d142647b3d2440e9
-
SHA512
f39dcd3909a9de5ad2a430ddcd151a28d04fdfdc8946053fa02f0f95fab0d0cccce48eb8d8f33c33673f1cda82c0936b9685ff6afd996cbee5581379c596fb84
-
SSDEEP
196608:mB56IQtrDbmXB++JfQN2n07V48xHi+wVij9iFOgz5z3Rsfu2K6JlsRK87LFRNj:mBNQtrHmXE+J6p7VF5dwJYg/aJSRX7xD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b9c5b5a68082cb5c6b09d185febd6900ffc6ccfdc4fd3516d142647b3d2440e9
Files
-
b9c5b5a68082cb5c6b09d185febd6900ffc6ccfdc4fd3516d142647b3d2440e9.exe windows:4 windows x86 arch:x86
f7dea59b51a60d2fe3eb99f937b62be5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
winmm
midiStreamClose
ws2_32
ntohl
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
user32
GetSysColorBrush
gdi32
CreateDCA
msimg32
GradientFill
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
SHEmptyRecycleBinA
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ImageList_Destroy
wininet
DeleteUrlCacheEntry
secur32
GetUserNameExA
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 18.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 6.9MB - Virtual size: 6.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE