Static task
static1
Behavioral task
behavioral1
Sample
69d94a0885b7f131326d7cae41efb70452844fa89fb3544322b965658e10e169.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
69d94a0885b7f131326d7cae41efb70452844fa89fb3544322b965658e10e169.exe
Resource
win10v2004-20240802-en
General
-
Target
69d94a0885b7f131326d7cae41efb70452844fa89fb3544322b965658e10e169
-
Size
2.4MB
-
MD5
72286312ba17b3ada9a3b3199cd168f6
-
SHA1
00afc23ac2a5f442de52ee3da143ab011b8cab7f
-
SHA256
69d94a0885b7f131326d7cae41efb70452844fa89fb3544322b965658e10e169
-
SHA512
cc8741af1a695694a40db04f142f6846af8261fe9d2117c361fe20e0b766c2d07ffef259c282f934308daa349dc2c7ddc2236b174fd09ec5d265a7ae516490f1
-
SSDEEP
24576:t/w1AifgbE1CrH32U475oc9rWqBqSSwVsEAM8EwNv7u5ALiQ3XQYZ7pp+ArMpSwF:trifgbYo2U4ulqxrVeunQ3L7ppqSwucl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 69d94a0885b7f131326d7cae41efb70452844fa89fb3544322b965658e10e169
Files
-
69d94a0885b7f131326d7cae41efb70452844fa89fb3544322b965658e10e169.exe windows:4 windows x86 arch:x86
c56a5503417efd783416aae37d8759a7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
SetLastError
user32
IsIconic
gdi32
TextOutA
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
ChooseFontA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ