Static task
static1
Behavioral task
behavioral1
Sample
09482539cfcf5ded8c3e0f16fc180078bb99389da48b65d2ab37063fc6181ccf.exe
Resource
win7-20240704-en
General
-
Target
09482539cfcf5ded8c3e0f16fc180078bb99389da48b65d2ab37063fc6181ccf
-
Size
8.7MB
-
MD5
402ef2e8fac48e6af137f2c540bc8eac
-
SHA1
c00a7938bf35253b1bc146a6f16d4812ef783786
-
SHA256
09482539cfcf5ded8c3e0f16fc180078bb99389da48b65d2ab37063fc6181ccf
-
SHA512
4061d001d6abc3b1d1390b3bff916ba2383c7fb78cd02d9286166d534b973314406c90a90f15b92f5b478751c524b7683900ea8bfe416e1e336f735e5ef7b624
-
SSDEEP
196608:rdYHQzq4mFo8XSoYsIafX8la5FTgIqqiq55wJ6A5bgISC7lma:rsQW4gDXSoYsR8lmgAv+bTblma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 09482539cfcf5ded8c3e0f16fc180078bb99389da48b65d2ab37063fc6181ccf
Files
-
09482539cfcf5ded8c3e0f16fc180078bb99389da48b65d2ab37063fc6181ccf.exe windows:5 windows x86 arch:x86
f073bd9dd79c7a1dbc51ccea2789361d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
midiStreamStop
ws2_32
WSACleanup
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
kernel32
VirtualProtect
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CreateWindowExA
gdi32
SetTextColor
winspool.drv
DocumentPropertiesA
comdlg32
GetSaveFileNameA
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SysAllocString
comctl32
ImageList_GetImageCount
Sections
.text Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 503KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 481KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp3.60 Size: - Virtual size: 953KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp3.61 Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ