Static task
static1
Behavioral task
behavioral1
Sample
049f86d2c1f62d200f3de7fb3b9ad2a6c2ad955ebee4af74c86921e98e643ed8.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
049f86d2c1f62d200f3de7fb3b9ad2a6c2ad955ebee4af74c86921e98e643ed8.exe
Resource
win10v2004-20240802-en
General
-
Target
049f86d2c1f62d200f3de7fb3b9ad2a6c2ad955ebee4af74c86921e98e643ed8
-
Size
24KB
-
MD5
f483ac9772a57f1e6f35bf6da4bdd148
-
SHA1
59312fa46734b758501b0321b52f14bc6c779a80
-
SHA256
049f86d2c1f62d200f3de7fb3b9ad2a6c2ad955ebee4af74c86921e98e643ed8
-
SHA512
0cc1f33f346328596e7cc66fac48c2eb2ca821a446b4ce83894bc08d668ab15cba6532eb4e20deb60d749e174ff9f7ff78f8cb05ba9b3b2f9a59a9a22cd891e5
-
SSDEEP
384:puwKSAVS8HF3pQrJFdOh59fTkM9+I2yppkorgdNF6:owKSAVS81uFU3qVI2yrkXdW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 049f86d2c1f62d200f3de7fb3b9ad2a6c2ad955ebee4af74c86921e98e643ed8
Files
-
049f86d2c1f62d200f3de7fb3b9ad2a6c2ad955ebee4af74c86921e98e643ed8.exe windows:4 windows x86 arch:x86
87d8154de7bd913fcdab4e4939ce1d01
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
zspool
GetPrintProcessorA
ZSP_MakeSpoolFilePath
OpenPrinterA
GetJobA
ClosePrinter
kernel32
CreateThread
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
FreeLibrary
DeleteFileA
GetProcAddress
LoadLibraryA
user32
PostMessageA
PostQuitMessage
IsWindow
DefWindowProcA
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA
DispatchMessageA
TranslateMessage
ShowWindow
CreateWindowExA
GetWindowTextA
msvcrt40
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_initterm
_except_handler3
_controlfp
__p__acmdln
exit
malloc
_XcptFilter
free
_exit
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 156B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE