Static task
static1
Behavioral task
behavioral1
Sample
19264121168b945580e0181bf337305b8bc66cb37326c7b79a350f1afddac3f2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
19264121168b945580e0181bf337305b8bc66cb37326c7b79a350f1afddac3f2.exe
Resource
win10v2004-20230220-en
General
-
Target
19264121168b945580e0181bf337305b8bc66cb37326c7b79a350f1afddac3f2
-
Size
888KB
-
MD5
60836eea81fcd7089b374555263d1ea6
-
SHA1
a0de04b7d78bf1673bf9e1e58fc06224a60deed8
-
SHA256
19264121168b945580e0181bf337305b8bc66cb37326c7b79a350f1afddac3f2
-
SHA512
b35f38958c2aeda78b2793095abd26f390d2b55fe7d2d98e88641e4bfcb94240a5848003a4dabf5b7dfc1dedc1d1c2bdc522ae87ebb282793fdb0f8a6f9d24f9
-
SSDEEP
24576:dP+opqln1rZZMHz6wli8DU1y6X4KwUhfqpm:x8ln1ViHWWxU1t3zhf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19264121168b945580e0181bf337305b8bc66cb37326c7b79a350f1afddac3f2
Files
-
19264121168b945580e0181bf337305b8bc66cb37326c7b79a350f1afddac3f2.exe windows x86
d40cef0b85299c68e744ff8a7ac9e57e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
DispatchMessageA
ole32
CoInitialize
shell32
SHChangeNotify
gdi32
CreateBitmap
winspool.drv
OpenPrinterA
advapi32
RegSetValueExA
comctl32
ord17
oledlg
ord8
oleaut32
VariantChangeType
shlwapi
PathFileExistsA
Sections
.text Size: - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SVMP0 Size: - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SVMP1 Size: 872KB - Virtual size: 870KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE