Static task
static1
Behavioral task
behavioral1
Sample
1d0e8f0bbe69f882a4a3786d73810689cf54470db760b1c0c322c466da05a2d3.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
1d0e8f0bbe69f882a4a3786d73810689cf54470db760b1c0c322c466da05a2d3.exe
Resource
win10v2004-20230621-en
General
-
Target
1d0e8f0bbe69f882a4a3786d73810689cf54470db760b1c0c322c466da05a2d3
-
Size
315KB
-
MD5
19046bd1e9e1c5c358730b283b46ceeb
-
SHA1
8bf22cb0e3f3b04b7fdacfdfadb9c4000c4e066d
-
SHA256
1d0e8f0bbe69f882a4a3786d73810689cf54470db760b1c0c322c466da05a2d3
-
SHA512
526d877c34fbf2582e48dad46bacd01771feff63d835a0522908d805d2b9c474d125576e8a499eebd1236cd17b2ccd228a9821cc2232d2bc2da5f98f32d26f77
-
SSDEEP
6144:UIvrk84y5eVWjNwLLuI3Ejncqwr7q5xS/HH4neYNXcSkkHI1veDDws+:3vIFyogFIPJvH4nHXdkmWveDDw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d0e8f0bbe69f882a4a3786d73810689cf54470db760b1c0c322c466da05a2d3
Files
-
1d0e8f0bbe69f882a4a3786d73810689cf54470db760b1c0c322c466da05a2d3.exe windows x86
08dd35fc44c2f4c312dc085a2d0dc461
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
RegQueryValueExW
comctl32
InitializeFlatSB
gdi32
UnrealizeObject
msimg32
AlphaBlend
ole32
OleUninitialize
oleaut32
SafeArrayPtrOfIndex
shell32
Shell_NotifyIconW
user32
CreateWindowExW
version
VerQueryValueW
winmm
PlaySoundW
Sections
.text Size: 286KB - Virtual size: 940KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE