Static task
static1
Behavioral task
behavioral1
Sample
d564ce0f63256373182540bc94666a1016e8783bd90ed72d1c0244fbc3caa6c2.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d564ce0f63256373182540bc94666a1016e8783bd90ed72d1c0244fbc3caa6c2.exe
Resource
win10v2004-20241007-en
General
-
Target
d564ce0f63256373182540bc94666a1016e8783bd90ed72d1c0244fbc3caa6c2
-
Size
4.0MB
-
MD5
7310cd75b8b579c4f22c04b6266fd7fb
-
SHA1
bd89c8bab82895b87e10a43e51d619ff089b29f0
-
SHA256
d564ce0f63256373182540bc94666a1016e8783bd90ed72d1c0244fbc3caa6c2
-
SHA512
2f51c46ae5407a752574843c061243d7187e954470feb402200ae2f7ad9baeb6bb4149310175760f6a68136d930c173f919decfa37ccc23e9af62721e88317c9
-
SSDEEP
98304:hbBnAA6idbzVw8df9ZxwmlE8f5mylsQRtngxxd99IW9GRgi:hbBnAA6WJw81hlBMSsfxxT/9GRg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d564ce0f63256373182540bc94666a1016e8783bd90ed72d1c0244fbc3caa6c2
Files
-
d564ce0f63256373182540bc94666a1016e8783bd90ed72d1c0244fbc3caa6c2.exe windows:5 windows x86 arch:x86
efc006273fe5a0a00ddd9ea41830a9bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
GetVersionExA
GetVersion
user32
GetCursorPos
gdi32
SetMapMode
winmm
waveOutRestart
winspool.drv
DocumentPropertiesA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
inet_ntoa
wininet
HttpQueryInfoA
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 95KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wh30 Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wh31 Size: 4KB - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wh32 Size: 3.8MB - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ