Static task
static1
Behavioral task
behavioral1
Sample
c718d36c2bc4d29b09a77385e2184649ce4760c4e57b439f534481248db5b2a7.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c718d36c2bc4d29b09a77385e2184649ce4760c4e57b439f534481248db5b2a7.exe
Resource
win10v2004-20240802-en
General
-
Target
c718d36c2bc4d29b09a77385e2184649ce4760c4e57b439f534481248db5b2a7
-
Size
15.3MB
-
MD5
d1e2a32c4008f45250527ed4f213a614
-
SHA1
5e707332a9f3551fb843e8c68143ea06830ef30a
-
SHA256
c718d36c2bc4d29b09a77385e2184649ce4760c4e57b439f534481248db5b2a7
-
SHA512
a61973751fd3fc33d2cca06de0bcc10ea128ade3ed5e6062ab1cec5b57284551dae27cece48385678d30a40c576b538e546b8ce34ac5326ae148682a858f8444
-
SSDEEP
393216:sbAmMBxns2tBMb90B1vJNizu31jDrNnRUkDgYiHs:dNBJtDB1vJ7l7Nn5DLiH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c718d36c2bc4d29b09a77385e2184649ce4760c4e57b439f534481248db5b2a7
Files
-
c718d36c2bc4d29b09a77385e2184649ce4760c4e57b439f534481248db5b2a7.exe windows:5 windows x86 arch:x86
23321fd0b9cb52338225be4f9c3ca9bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiStreamClose
ws2_32
inet_ntoa
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
wvsprintfA
gdi32
RoundRect
winspool.drv
ClosePrinter
comdlg32
PrintDlgA
advapi32
RegQueryValueExA
shell32
DragQueryFileA
ole32
DoDragDrop
oleaut32
LoadTypeLi
comctl32
ord17
wldap32
ord29
Sections
.text Size: - Virtual size: 825KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp0 Size: - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp1 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.svmp2 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 15.2MB - Virtual size: 15.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ