Static task
static1
Behavioral task
behavioral1
Sample
8e417810292b42c03a3f80b5a2f2f3c727264ff4e79ea19c75e98fd3ae05d976.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8e417810292b42c03a3f80b5a2f2f3c727264ff4e79ea19c75e98fd3ae05d976.exe
Resource
win10v2004-20241007-en
General
-
Target
8e417810292b42c03a3f80b5a2f2f3c727264ff4e79ea19c75e98fd3ae05d976
-
Size
971KB
-
MD5
356bf22b933b79ec290b8f9cf3c17a97
-
SHA1
2caae4e785ec7018a34a35b49931b33b6861a590
-
SHA256
8e417810292b42c03a3f80b5a2f2f3c727264ff4e79ea19c75e98fd3ae05d976
-
SHA512
ebeb55c4f2745f16c4aa70c970be2a618d69c48d8e5ec67175b913b33b0bf35ba35b2695d8dbb91fb56971214373b47286bb1d19a2a6df69aad13e5cb3c181a0
-
SSDEEP
24576:lc6tXxPL8xNm5YpYEVHsnGShzU9SndYYs0U++yAU:ldZxQxNm5lEXShzU9rYs0U+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e417810292b42c03a3f80b5a2f2f3c727264ff4e79ea19c75e98fd3ae05d976
Files
-
8e417810292b42c03a3f80b5a2f2f3c727264ff4e79ea19c75e98fd3ae05d976.exe windows:4 windows x86 arch:x86
d7bd3cc4ab380556d8c86905bfe993ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
winmm
waveOutOpen
ws2_32
WSACleanup
user32
GetDC
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
DragFinish
ole32
OleRun
oleaut32
UnRegisterTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.MPRESS1 Size: 946KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE