Static task
static1
Behavioral task
behavioral1
Sample
9f91578bf0c5bce20fbe77046f957f2a5f38e35c289ab1a186772116c0dc958b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
9f91578bf0c5bce20fbe77046f957f2a5f38e35c289ab1a186772116c0dc958b.exe
Resource
win10v2004-20240802-en
General
-
Target
9f91578bf0c5bce20fbe77046f957f2a5f38e35c289ab1a186772116c0dc958b
-
Size
7.1MB
-
MD5
6ec1267a9990a0a9e43d475d9f003356
-
SHA1
89f8e9474f7da4dc54e10ababa7ef52b0e60a523
-
SHA256
9f91578bf0c5bce20fbe77046f957f2a5f38e35c289ab1a186772116c0dc958b
-
SHA512
0de9577b4f53c5d7260abb4bef152b4d56dae284b0152a18aaf36c12c4d90afd0c07e3e47a55128f8f7c1a4585c2bc7c05224a2ee29d2ea1af8acce728fe0ea0
-
SSDEEP
196608:H70fNvSZIXG6JFwoYL+muO4UP3GypI0Fj:HYv5G6JFw0PwGg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f91578bf0c5bce20fbe77046f957f2a5f38e35c289ab1a186772116c0dc958b
Files
-
9f91578bf0c5bce20fbe77046f957f2a5f38e35c289ab1a186772116c0dc958b.exe windows:5 windows x64 arch:x64
ad5bb16372d493a63847d20377e56618
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
wsock32
getservbyport
winmm
waveOutGetVolume
version
GetFileVersionInfoW
comctl32
ImageList_GetIconSize
psapi
GetModuleBaseNameW
wininet
InternetReadFile
kernel32
GetVersionExW
GetVersion
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetWindowPos
CharUpperBuffW
gdi32
GdiFlush
comdlg32
CommDlgExtendedError
advapi32
GetUserNameW
shell32
DragQueryPoint
ole32
OleInitialize
oleaut32
OleLoadPicture
Sections
.text Size: - Virtual size: 947KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 210KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.C=! Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.C < Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ea~ Size: 7.1MB - Virtual size: 7.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ