Static task
static1
Behavioral task
behavioral1
Sample
372cc4d77ae2392ae0f76d59d82481f306a33613222086696447e4c0dec1bc89N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
372cc4d77ae2392ae0f76d59d82481f306a33613222086696447e4c0dec1bc89N.exe
Resource
win10v2004-20241007-en
General
-
Target
372cc4d77ae2392ae0f76d59d82481f306a33613222086696447e4c0dec1bc89N
-
Size
2.3MB
-
MD5
bdde06941a393aec3856534264341a50
-
SHA1
2fb9980801cc11485fa2efa477efb3971aaa1747
-
SHA256
372cc4d77ae2392ae0f76d59d82481f306a33613222086696447e4c0dec1bc89
-
SHA512
186bd1428562904174a19c5eebb8762a6c512b4daef084174929662350ac23c752f41df5aa9499cee1c9dba2bbdfc988a6b109fbe651bebdec5a9bc8cbbbef0b
-
SSDEEP
49152:q5UmCY829zLwUPZWyqDW+oquhrK3cRMARcFeKF2Ie9+tFeVs:qemCYfwkZ9WdeG3c2AyeKF2IY+WVs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 372cc4d77ae2392ae0f76d59d82481f306a33613222086696447e4c0dec1bc89N
Files
-
372cc4d77ae2392ae0f76d59d82481f306a33613222086696447e4c0dec1bc89N.exe windows:4 windows x86 arch:x86
96ecd8b5ae96edd612481ae7274c9bc9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
socket
rasapi32
RasHangUpA
kernel32
SetFilePointer
user32
GetMessagePos
gdi32
GetTextMetricsA
winspool.drv
OpenPrinterA
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
VariantChangeType
comctl32
ord17
wininet
InternetCloseHandle
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.3MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1000KB - Virtual size: 1000KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ