Static task
static1
Behavioral task
behavioral1
Sample
f018ecb07c9a52a5cb8f0592983cf38b98d25770f76478b4f84ff67bc5e422cd.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
f018ecb07c9a52a5cb8f0592983cf38b98d25770f76478b4f84ff67bc5e422cd.exe
Resource
win10-20230703-en
Behavioral task
behavioral3
Sample
f018ecb07c9a52a5cb8f0592983cf38b98d25770f76478b4f84ff67bc5e422cd.exe
Resource
win10v2004-20230703-en
General
-
Target
f018ecb07c9a52a5cb8f0592983cf38b98d25770f76478b4f84ff67bc5e422cd
-
Size
31KB
-
MD5
5da15f9ecb600831ffae0822e46a9539
-
SHA1
17e95d692cc7968dada28a1caab841751b836cf5
-
SHA256
f018ecb07c9a52a5cb8f0592983cf38b98d25770f76478b4f84ff67bc5e422cd
-
SHA512
59d24dc2e0598da57721635fea7d9a0716d69bcbd0f26449b3c082da5e8c032f9bdb0e10b44e5ceca70490f6ee135fc40f3c1fbc7ab7b2b11c77b572118c8275
-
SSDEEP
768:R6pOIuvyrWH5o0kJ1WcnyLUxAxKKh0/n+J:R6pOIuaqH5jMWcnHIBJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f018ecb07c9a52a5cb8f0592983cf38b98d25770f76478b4f84ff67bc5e422cd
Files
-
f018ecb07c9a52a5cb8f0592983cf38b98d25770f76478b4f84ff67bc5e422cd.exe windows x86
e93ab621b41560812ea45815b4589244
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathA
ole32
CoCreateInstance
CoSetProxyBlanket
CoInitialize
oleaut32
VariantClear
SysAllocString
SysFreeString
kernel32
DeleteFileA
EnterCriticalSection
ExitProcess
GetCommandLineA
GetComputerNameA
GetExitCodeProcess
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersionExA
GetVolumeInformationA
InitializeCriticalSection
IsBadStringPtrW
LeaveCriticalSection
PeekNamedPipe
RtlUnwind
WideCharToMultiByte
lstrlenW
CreatePipe
user32
LoadCursorA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
OemToCharA
RegisterClassA
PostQuitMessage
CreateWindowExA
DestroyWindow
DefWindowProcA
gdi32
GetStockObject
advapi32
ChangeServiceConfig2A
CloseServiceHandle
CreateServiceA
OpenSCManagerA
OpenServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
StartServiceCtrlDispatcherA
RegOpenKeyExA
RegQueryValueExA
crtdll
__GetMainArgs
exit
raise
signal
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE