Static task
static1
Behavioral task
behavioral1
Sample
634fac779be1875f138da0ae06e72c329a7cbd01245d403b7c4bc416720c1275.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
634fac779be1875f138da0ae06e72c329a7cbd01245d403b7c4bc416720c1275.exe
Resource
win10v2004-20240802-en
General
-
Target
634fac779be1875f138da0ae06e72c329a7cbd01245d403b7c4bc416720c1275
-
Size
3.4MB
-
MD5
a46fc101cb3e9f10b0d12dd33ce3fb4f
-
SHA1
dcfc56ed573b84fdf1e9778eec4ea663cf0936dd
-
SHA256
634fac779be1875f138da0ae06e72c329a7cbd01245d403b7c4bc416720c1275
-
SHA512
35b7064bc2fc2f4bf76b1f20eb5d2bbec8f9cc173419f6319f89fa24b3c3033abb9943bad70c23a0d4b367bfc1411b05b2f7f7f170cdd48c9bf5a5fc083db3fe
-
SSDEEP
98304:OFCJvPWwlSRCorX01MEYF1+39S4HduJLMS:OgJXWwhorkpYFjQdIQS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 634fac779be1875f138da0ae06e72c329a7cbd01245d403b7c4bc416720c1275
Files
-
634fac779be1875f138da0ae06e72c329a7cbd01245d403b7c4bc416720c1275.exe windows:4 windows x86 arch:x86
f7803676789b7644db0647c86f669a8c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
winmm
midiStreamProperty
ws2_32
inet_ntoa
rasapi32
RasGetConnectStatusA
kernel32
DuplicateHandle
user32
PostThreadMessageA
gdi32
GetStockObject
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
OleFlushClipboard
oleaut32
VariantInit
comctl32
ImageList_EndDrag
oledlg
ord8
wininet
InternetCloseHandle
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.1MB - Virtual size: 8.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ