Static task
static1
Behavioral task
behavioral1
Sample
9556e4eb10a77c1e3498df4d1b6826c2d8968f7164c9ea9b0d735ac47c827b53.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
9556e4eb10a77c1e3498df4d1b6826c2d8968f7164c9ea9b0d735ac47c827b53.exe
Resource
win10v2004-20241007-en
General
-
Target
9556e4eb10a77c1e3498df4d1b6826c2d8968f7164c9ea9b0d735ac47c827b53
-
Size
3.4MB
-
MD5
92d594db31fc8e60156a0b76507e172d
-
SHA1
4f43013d937d0e3ed57319fe5c40f15061310ca0
-
SHA256
9556e4eb10a77c1e3498df4d1b6826c2d8968f7164c9ea9b0d735ac47c827b53
-
SHA512
07bb8e5e233d8762175fba507ed962ab491c152a702351caa866913a8911c9df05e931a280bf54f69f82df3665c95381251be73e531221b3976f99bea80e8fe3
-
SSDEEP
98304:1Nz5iNK/92Tly2B4E343+lQ735V/6tBRNfz:vdiiYh4E3gTpV4fz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9556e4eb10a77c1e3498df4d1b6826c2d8968f7164c9ea9b0d735ac47c827b53
Files
-
9556e4eb10a77c1e3498df4d1b6826c2d8968f7164c9ea9b0d735ac47c827b53.exe windows:4 windows x86 arch:x86
0b34c2bc5d6871d1f6035807d2eb932e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetTimeZoneInformation
user32
DefWindowProcA
gdi32
ExtSelectClipRgn
winspool.drv
OpenPrinterA
advapi32
RegQueryValueExA
shell32
Shell_NotifyIconA
ole32
CLSIDFromProgID
oleaut32
UnRegisterTypeLi
comctl32
ImageList_GetIcon
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.4MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1008KB - Virtual size: 1008KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ