Static task
static1
Behavioral task
behavioral1
Sample
1b3b597b86a6d45ec409b8321f7d35d9f8f8421a3158d774fca674e8cf111652.exe
Resource
win10-20230220-en
General
-
Target
1b3b597b86a6d45ec409b8321f7d35d9f8f8421a3158d774fca674e8cf111652
-
Size
3.6MB
-
MD5
4beeb31a893d66bc811bdf41617332eb
-
SHA1
76b4c318e1cfe668f1add3b26307f6eeeb126e3e
-
SHA256
1b3b597b86a6d45ec409b8321f7d35d9f8f8421a3158d774fca674e8cf111652
-
SHA512
cd518d32eadef05e96033a0dd788e7a9c88d07032b5dbbc8275dd69dc87a3d84a6e8a28c5c62cd1d64e154f4cb030e988c5bfdaa0331a1f65e180a2f76ebe171
-
SSDEEP
98304:ibNYQ7/X1fY6dkETno0MXO7BgEnWkmdep+kJ0/D/:z2/FoEjoN+dgBscF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b3b597b86a6d45ec409b8321f7d35d9f8f8421a3158d774fca674e8cf111652
Files
-
1b3b597b86a6d45ec409b8321f7d35d9f8f8421a3158d774fca674e8cf111652.exe windows x86
8034d78cd5a5788746d6b0a217a14d62
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
getaddrinfo
kernel32
GetModuleHandleA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetClipboardData
advapi32
RegOpenKeyExA
shell32
SHGetFolderPathA
Sections
.text Size: - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y%$ERGTF Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Y%$ERGTF Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y%$ERGTF Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ