Static task
static1
Behavioral task
behavioral1
Sample
c31659a4229b57e90d8e301eba0c07d0cb9e2cf7a5600047d0af12c031cd1da7.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c31659a4229b57e90d8e301eba0c07d0cb9e2cf7a5600047d0af12c031cd1da7.exe
Resource
win10v2004-20240802-en
General
-
Target
c31659a4229b57e90d8e301eba0c07d0cb9e2cf7a5600047d0af12c031cd1da7
-
Size
6.0MB
-
MD5
10093134c412c3419980df51bc872f8f
-
SHA1
fa2e04f449d8fc03c1c47c0dc9f4537679b79174
-
SHA256
c31659a4229b57e90d8e301eba0c07d0cb9e2cf7a5600047d0af12c031cd1da7
-
SHA512
525aa1b70e08df223f3f0f2b25c1798587d4d220e25940800887b93542070b2ec9bdbb979f7a13059b53f30e8ab2262517f0ac84a3daeab916af776a6c1a936e
-
SSDEEP
98304:mqMZMi47OIndnqnDn4y2NWsDKQhRJEpV+xPqPpJ/UKtQEDkwr6J/VwyZrF:HMZMZ7TdqnD4yA9pwj+EPpJJryiyZZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c31659a4229b57e90d8e301eba0c07d0cb9e2cf7a5600047d0af12c031cd1da7
Files
-
c31659a4229b57e90d8e301eba0c07d0cb9e2cf7a5600047d0af12c031cd1da7.exe windows:4 windows x86 arch:x86
90874568d8e6865362465be0fd1c94f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateRemoteThread
TlsAlloc
shlwapi
StrToIntExA
ws2_32
WSAStartup
recvfrom
version
GetFileVersionInfoA
user32
GetClassNameA
PtInRect
advapi32
RegSetValueExA
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ole32
CLSIDFromString
psapi
GetModuleInformation
oleaut32
SafeArrayGetDim
UnRegisterTypeLi
winmm
midiStreamRestart
rasapi32
RasGetConnectStatusA
gdi32
ExcludeClipRect
msimg32
GradientFill
winspool.drv
OpenPrinterA
comctl32
ImageList_DrawIndirect
wininet
InternetConnectA
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
Sections
.text Size: 3.3MB - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ