Static task
static1
Behavioral task
behavioral1
Sample
0773c176c44f03af2ab39e754fb34d9f4392a4323300ecb6a709d1e68b4b3de1.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0773c176c44f03af2ab39e754fb34d9f4392a4323300ecb6a709d1e68b4b3de1.exe
Resource
win10v2004-20240802-en
General
-
Target
0773c176c44f03af2ab39e754fb34d9f4392a4323300ecb6a709d1e68b4b3de1
-
Size
11.0MB
-
MD5
b98ab17e88f02decad22c897a7a953e0
-
SHA1
7c110da6d3c0b0f8de7c71f64ea2288fc8cbdc45
-
SHA256
0773c176c44f03af2ab39e754fb34d9f4392a4323300ecb6a709d1e68b4b3de1
-
SHA512
7935a7d94a695507f59043bcd1a8af5dc80bac78319649f97d89015cae2c6085e2d68c55b62c850e0260ecc97af86b828a68cfc3ba15816fd5b1213a617bf33a
-
SSDEEP
196608:PE0P0tFEubH35RlTY/kJvE7TjkcCXIwY8A1fFn0FuV4OiXsgeQz:PBMHEMRlTYsJvE78bIGAfFn0FuuVXmQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0773c176c44f03af2ab39e754fb34d9f4392a4323300ecb6a709d1e68b4b3de1
Files
-
0773c176c44f03af2ab39e754fb34d9f4392a4323300ecb6a709d1e68b4b3de1.exe windows:5 windows x86 arch:x86
1ddfc0aef8768a2699f090dd730bf2b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
DestroyAcceleratorTable
gdi32
Escape
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 625KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 321KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.,Q[ Size: - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.B>x Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.}>, Size: 10.8MB - Virtual size: 10.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 232KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ