Static task
static1
Behavioral task
behavioral1
Sample
a9035de7a0a8a376363678ebb7ffdc36372a4ec35821f3a5c75a2633da5f2404.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a9035de7a0a8a376363678ebb7ffdc36372a4ec35821f3a5c75a2633da5f2404.exe
Resource
win10v2004-20240802-en
General
-
Target
a9035de7a0a8a376363678ebb7ffdc36372a4ec35821f3a5c75a2633da5f2404
-
Size
12.8MB
-
MD5
2f73f98458134cf81e97daf21d55f862
-
SHA1
2c09c81b1e6ca67e9d5c5ca5ec5dfc8455fa6041
-
SHA256
a9035de7a0a8a376363678ebb7ffdc36372a4ec35821f3a5c75a2633da5f2404
-
SHA512
f87ad463d4e0293ab585f2d5499a4ceb4b386aaea91a21d8ea5a0fbb9e76a1d285609abc8e2f4a23e6a2b1d5551f1c6d63ad433e8a1eb02471a6f332493eda17
-
SSDEEP
196608:ldCv3D1E40gEv+QutcQyAkIPW0SclTEZIzRB2fOcNEru4ByOhsuVn4zFDeetHy+V:a8vxu335qWr2fOU0BwOHn4z1nV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a9035de7a0a8a376363678ebb7ffdc36372a4ec35821f3a5c75a2633da5f2404
Files
-
a9035de7a0a8a376363678ebb7ffdc36372a4ec35821f3a5c75a2633da5f2404.exe windows:5 windows x86 arch:x86
770dd671fd8f6f1c090d8b3cd3fc67bd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mumsg
??0CMsg@@QAE@XZ
winmm
sndPlaySoundA
ws2_32
inet_ntoa
wz_zp
BZ2_bzDecompressEnd
gdiplus
GdipCreateBitmapFromHBITMAP
kernel32
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetDlgItemTextA
gdi32
BitBlt
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegCreateKeyExA
shell32
DragQueryFileA
comctl32
_TrackMouseEvent
shlwapi
UrlUnescapeA
oledlg
ord8
ole32
CoGetClassObject
oleaut32
VariantClear
urlmon
URLDownloadToFileA
wininet
InternetSetOptionA
Sections
.text Size: - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.+)L Size: - Virtual size: 9.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wR~ Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.|sh Size: 11.8MB - Virtual size: 11.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ