Static task
static1
Behavioral task
behavioral1
Sample
641fe33dcfee2baa4d3af94138a9001c8f1ef7e6efad23f62bd88e1e182405da.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
641fe33dcfee2baa4d3af94138a9001c8f1ef7e6efad23f62bd88e1e182405da.exe
Resource
win10v2004-20240802-en
General
-
Target
641fe33dcfee2baa4d3af94138a9001c8f1ef7e6efad23f62bd88e1e182405da
-
Size
7.4MB
-
MD5
4109a3e122059bd865412074c51f709a
-
SHA1
b8f64cd4c7f680fb37195b4a3c21ab46d6e2a88a
-
SHA256
641fe33dcfee2baa4d3af94138a9001c8f1ef7e6efad23f62bd88e1e182405da
-
SHA512
e5864faf06d83a3a3be3172c1f1b3c334d07834d062c6e4039d524a36b60f0966115c3ccec3c32f352f87a29b9005485dc16c193b128e3493b8be95c1bbeee4b
-
SSDEEP
98304:n185XcfbeVJlne5yXw8sXYlIEJfRSZTWjZ4LWOKVHfTRsU01IqCoI4GRR+EeV7:uqCJIB8LXRe8Z43CSU01IqM4GRR+EO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 641fe33dcfee2baa4d3af94138a9001c8f1ef7e6efad23f62bd88e1e182405da
Files
-
641fe33dcfee2baa4d3af94138a9001c8f1ef7e6efad23f62bd88e1e182405da.exe windows:4 windows x86 arch:x86
cd627c43696a0b4eb7a8542dda1c540c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockFile
user32
GetMenuItemCount
gdi32
CreatePalette
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
recvfrom
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 6.2MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 968KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ