Static task
static1
Behavioral task
behavioral1
Sample
675dc7a9f1176176be6c5d29363761dabc79d76bf92ef17f8ae8e7b448a31567.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
675dc7a9f1176176be6c5d29363761dabc79d76bf92ef17f8ae8e7b448a31567.exe
Resource
win10v2004-20240802-en
General
-
Target
675dc7a9f1176176be6c5d29363761dabc79d76bf92ef17f8ae8e7b448a31567
-
Size
14.9MB
-
MD5
28342244aea83da79306a8cd4e2f3b34
-
SHA1
c51fcc0f9619c23d7f952144977463f5528d7844
-
SHA256
675dc7a9f1176176be6c5d29363761dabc79d76bf92ef17f8ae8e7b448a31567
-
SHA512
8ffa6bad07ed8ca2dc145a9ac57c3bd47243d50a283d6e68bfafdb246641b14720c4e4a88d9817392537beee52f54cedf212aa358bf06feba8ce0708f2deffaa
-
SSDEEP
393216:GReNPlX1+nno9VyEN5qkOuXUbD13YPT2:GRDodXXUbD+72
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 675dc7a9f1176176be6c5d29363761dabc79d76bf92ef17f8ae8e7b448a31567
Files
-
675dc7a9f1176176be6c5d29363761dabc79d76bf92ef17f8ae8e7b448a31567.exe windows:5 windows x86 arch:x86
869d720bb84bd75d9f276d061de8c7d2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
user32
OpenClipboard
gdi32
BeginPath
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegSetValueExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
ws2_32
accept
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 522KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 7.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qvmp0 Size: - Virtual size: 7.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.qvmp1 Size: 4KB - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qvmp2 Size: 14.8MB - Virtual size: 14.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ