Static task
static1
Behavioral task
behavioral1
Sample
4a2d884e6fed5ec53acb27bbf0b764410a1f9bafdab60aaca95c6ac09e3bfa7c.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4a2d884e6fed5ec53acb27bbf0b764410a1f9bafdab60aaca95c6ac09e3bfa7c.exe
Resource
win10v2004-20240802-en
General
-
Target
4a2d884e6fed5ec53acb27bbf0b764410a1f9bafdab60aaca95c6ac09e3bfa7c
-
Size
10.4MB
-
MD5
892486d625202edec35ccefd61463367
-
SHA1
83b0b8210fd95189745025e336b46be0e538f660
-
SHA256
4a2d884e6fed5ec53acb27bbf0b764410a1f9bafdab60aaca95c6ac09e3bfa7c
-
SHA512
36a62584140bcd520ae225b087252d1217ad7851dd8863265089f49c9a8bbdbe1a0b5f316b259dbebf58e54eaaf23527d425814557644a51732b6d92cbd5fc3e
-
SSDEEP
196608:YKU6T5mdP2enBBZiF7jYJxwr9tO0VBLUXHJ7q9abmuNeG6LY:JU69mdPP473tO0U3J76abnYGx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a2d884e6fed5ec53acb27bbf0b764410a1f9bafdab60aaca95c6ac09e3bfa7c
Files
-
4a2d884e6fed5ec53acb27bbf0b764410a1f9bafdab60aaca95c6ac09e3bfa7c.exe windows:5 windows x86 arch:x86
4a9790a680e9a2a92f7061449dfe55d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutPrepareHeader
ws2_32
WSACleanup
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetFocus
CharUpperBuffW
gdi32
GetTextMetricsA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.;f< Size: - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.nM\ Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.;\F Size: 10.3MB - Virtual size: 10.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ