Static task
static1
Behavioral task
behavioral1
Sample
13a41c07b99802ff892736fea6f8d363bea28a816f6e1a1ddff13bf844cd828e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
13a41c07b99802ff892736fea6f8d363bea28a816f6e1a1ddff13bf844cd828e.exe
Resource
win10v2004-20240802-en
General
-
Target
13a41c07b99802ff892736fea6f8d363bea28a816f6e1a1ddff13bf844cd828e
-
Size
15.6MB
-
MD5
1823c95e67b1f334df33ea84fd9fbf9a
-
SHA1
5b172bba888914c2781da8441393b590d8561164
-
SHA256
13a41c07b99802ff892736fea6f8d363bea28a816f6e1a1ddff13bf844cd828e
-
SHA512
0d423f19aa6c2ff8dd92f3312fe1bcc63758a23d749a3844fbce5c3109d36c5eb102efcdda4b3981c01f538b5824bdac62c5c4f8128ea19736231c6160fa46f3
-
SSDEEP
393216:6B77F1l5nu3WibT+7KDHLmvQmjRqtMKkMO78TT:617Z5nwWET+76HLmRoFkMOI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13a41c07b99802ff892736fea6f8d363bea28a816f6e1a1ddff13bf844cd828e
Files
-
13a41c07b99802ff892736fea6f8d363bea28a816f6e1a1ddff13bf844cd828e.exe windows:5 windows x86 arch:x86
5407cbeee273538cb9610d07f58fd303
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
wsprintfA
gdi32
RestoreDC
winmm
midiStreamClose
winspool.drv
OpenPrinterA
advapi32
RegSetValueExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SysAllocString
comctl32
ord17
ws2_32
WSAAsyncSelect
comdlg32
GetOpenFileNameA
Sections
.text Size: - Virtual size: 683KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 303KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
._ju Size: - Virtual size: 8.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.!g1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.V0k Size: 15.6MB - Virtual size: 15.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ