Static task
static1
Behavioral task
behavioral1
Sample
ce7bab667964deede3c91e189734a4a288ef6847039f8adf1e9a9927c30ebb3b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ce7bab667964deede3c91e189734a4a288ef6847039f8adf1e9a9927c30ebb3b.exe
Resource
win10v2004-20230220-en
General
-
Target
ce7bab667964deede3c91e189734a4a288ef6847039f8adf1e9a9927c30ebb3b
-
Size
1.6MB
-
MD5
c8c9e60f501b41d2451010e77cddb0cd
-
SHA1
8f0a90790027e529cf35d949d13c4e2e5d9b1f36
-
SHA256
ce7bab667964deede3c91e189734a4a288ef6847039f8adf1e9a9927c30ebb3b
-
SHA512
f6b60c67d7f5a7a686fe3597af42bc50a41523d61ac85964c196616b2ae5a5aba12df6a61e8a40cc2fa1f8ba098c600b815c028e310a256275e68f9cbe8e890b
-
SSDEEP
49152:HmlilQQLsqbKPcFeN6biW0K0g3NbG4lqY:HmW5UueNnQ3NbtqY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce7bab667964deede3c91e189734a4a288ef6847039f8adf1e9a9927c30ebb3b
Files
-
ce7bab667964deede3c91e189734a4a288ef6847039f8adf1e9a9927c30ebb3b.exe windows x86
d84822b46b8dfe5e9f12ca6e631334ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvfw32
DrawDibDraw
avifil32
AVIStreamInfoA
iphlpapi
GetAdaptersInfo
winmm
midiStreamStop
ws2_32
WSACleanup
rasapi32
RasGetConnectStatusA
user32
SetWindowContextHelpId
gdi32
GetStockObject
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
GetOpenFileNameA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CoRevokeClassObject
oleaut32
SafeArrayCreate
comctl32
ord17
oledlg
ord8
wininet
InternetCloseHandle
wldap32
ord29
Sections
.text Size: 1.2MB - Virtual size: 4.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE