Static task
static1
Behavioral task
behavioral1
Sample
943be5b1226d83ec98d265300a1258d3e8a87e9b335c90a122d5eb5da9a0a18f.exe
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
943be5b1226d83ec98d265300a1258d3e8a87e9b335c90a122d5eb5da9a0a18f.exe
Resource
win10v2004-20230703-en
General
-
Target
943be5b1226d83ec98d265300a1258d3e8a87e9b335c90a122d5eb5da9a0a18f
-
Size
262KB
-
MD5
e1890ffcca4dba2cd88ed63ef17e911b
-
SHA1
0834aadccf3c5b23e4c85e023e4f0c560d9b7474
-
SHA256
943be5b1226d83ec98d265300a1258d3e8a87e9b335c90a122d5eb5da9a0a18f
-
SHA512
0eca405f52ffb896ffedab01a730f4785b66718e98a93f1d23021bb7033060059ac4a4a8efcc12169c8b0cf48b9123a80601114bfc3ed5e92ef86336435cef9f
-
SSDEEP
6144:giRFqYccqKaNn98ayOqSn6+62N5BtrB1Ux+ajMWyITMgggB:XR0YcnJ98ayOqS6R85BFBIJIWxB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 943be5b1226d83ec98d265300a1258d3e8a87e9b335c90a122d5eb5da9a0a18f
Files
-
943be5b1226d83ec98d265300a1258d3e8a87e9b335c90a122d5eb5da9a0a18f.exe windows x86
1cbb0956bb3493568e6ff32408eeac2c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
dhplay
ord37
user32
GetClassInfoExW
gdi32
CreateSolidBrush
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
advapi32
RegQueryValueW
shell32
SHGetPathFromIDListW
comctl32
ImageList_GetIconSize
shlwapi
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoRegisterMessageFilter
oleaut32
SysAllocString
Sections
.text Size: 234KB - Virtual size: 668KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE