Static task
static1
Behavioral task
behavioral1
Sample
160e794927f22def65aabed87c0df694eb0e9f3ac41113e726b8c26a74e28e18.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
160e794927f22def65aabed87c0df694eb0e9f3ac41113e726b8c26a74e28e18.exe
Resource
win10-20230220-en
General
-
Target
160e794927f22def65aabed87c0df694eb0e9f3ac41113e726b8c26a74e28e18
-
Size
4.4MB
-
MD5
761afbebdb4be1148d9aebe234849962
-
SHA1
9ba18cebdf6578041a16b5f7ff9c76b914aed223
-
SHA256
160e794927f22def65aabed87c0df694eb0e9f3ac41113e726b8c26a74e28e18
-
SHA512
de8fad686e49c842871e1e6f964e6abc47d898171916f14ae3c7b309c43b4b0086add392fceb540d8f22823dab6d9889646158de052c15677a4a510882e28289
-
SSDEEP
98304:lYJ8kro7qdLJc4PlPz0ecmv/4Lg+66koUrONSzxFOpJ+h:I8vU5gLgAUOSz0Jy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 160e794927f22def65aabed87c0df694eb0e9f3ac41113e726b8c26a74e28e18
Files
-
160e794927f22def65aabed87c0df694eb0e9f3ac41113e726b8c26a74e28e18.exe windows x86
61f8fe009fd5fb28895d7f92e405cf04
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
freeaddrinfo
kernel32
GlobalUnlock
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
OpenClipboard
advapi32
RegCloseKey
Sections
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ETHRGFED Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ETHRGFED Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ETHRGFED Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ