Static task
static1
Behavioral task
behavioral1
Sample
a96579b44c3cf942b86d09dd1b3bba90dd61decd685e5adcffaf7d238e4a53ddN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a96579b44c3cf942b86d09dd1b3bba90dd61decd685e5adcffaf7d238e4a53ddN.exe
Resource
win10v2004-20241007-en
General
-
Target
a96579b44c3cf942b86d09dd1b3bba90dd61decd685e5adcffaf7d238e4a53ddN
-
Size
3.1MB
-
MD5
0ebb0538176a4544d150be259f7037a0
-
SHA1
932e65d48bd2999d8d0fb0b4d1aa47808043ed7c
-
SHA256
a96579b44c3cf942b86d09dd1b3bba90dd61decd685e5adcffaf7d238e4a53dd
-
SHA512
a17477c29018d4f6ae67cb49510bd6744dc19e44f8810d5b8f5c3b741bb708ebab51e75ba27ce981ce8bad9f698e5a951f5ffb13bd97f8be70c2644cabb0fdf0
-
SSDEEP
49152:RfC5YqoT4z4HARbbJdktHeatF2uBDolQ0emQV3yBmU50TmBaQYjh+YhlLfQPTLe:MbePH8AtHeDUclQZwBqHV+YXLoPTLe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a96579b44c3cf942b86d09dd1b3bba90dd61decd685e5adcffaf7d238e4a53ddN
Files
-
a96579b44c3cf942b86d09dd1b3bba90dd61decd685e5adcffaf7d238e4a53ddN.exe windows:4 windows x86 arch:x86
6f7e9b7d4d425b22aaea0dfdcb08403b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
WSAAsyncSelect
kernel32
SetLastError
user32
IsIconic
gdi32
ExtTextOutA
winspool.drv
ClosePrinter
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetUBound
comctl32
ImageList_GetIcon
wldap32
ord29
comdlg32
GetOpenFileNameA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.6MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ