Static task
static1
Behavioral task
behavioral1
Sample
b356f151b8d0e4fc77fe9de35ecd511a6cd24f0438a08e9336db15e8533318c9.exe
Resource
win7-20240903-en
General
-
Target
b356f151b8d0e4fc77fe9de35ecd511a6cd24f0438a08e9336db15e8533318c9
-
Size
6.1MB
-
MD5
6cdfbadae7dd3b9ba186c298a31a2f01
-
SHA1
3bfa1bd8b8010675cc67dc0f72ce31d13e1ef0d2
-
SHA256
b356f151b8d0e4fc77fe9de35ecd511a6cd24f0438a08e9336db15e8533318c9
-
SHA512
0a51fb3784a117f883a52c87435c3a2c348d219dd3056a056bc5927700adc0a52954c4b6526e99dff0ad1d172007d04421c1df15ffd63c50d5ddfb6db543bcaa
-
SSDEEP
98304:VsQ+BPmYGxJori+/j02BKtU9pBAQ5dbgfCKnu3KdAhfy4IgEsRK3s8s8PhKyinFB:gw+i+o2st6sfu2K6JlsRK87LFRNj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b356f151b8d0e4fc77fe9de35ecd511a6cd24f0438a08e9336db15e8533318c9
Files
-
b356f151b8d0e4fc77fe9de35ecd511a6cd24f0438a08e9336db15e8533318c9.exe windows:4 windows x86 arch:x86
68c400dad701fb216abc657b2a0f5e09
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
winmm
midiStreamProperty
ws2_32
accept
user32
SendDlgItemMessageA
gdi32
RoundRect
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ord17
secur32
GetUserNameExA
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE