Static task
static1
Behavioral task
behavioral1
Sample
1c6f5555e230665b1554917f77ca327f4e1042c4a002f167d54ec9fd59de2ff2.exe
Resource
win7-20230712-en
General
-
Target
1c6f5555e230665b1554917f77ca327f4e1042c4a002f167d54ec9fd59de2ff2
-
Size
1.1MB
-
MD5
cedef2198314d2176a960f9417a0d157
-
SHA1
b3967238bd600e9f1e7bf05b28932b74bb010b63
-
SHA256
1c6f5555e230665b1554917f77ca327f4e1042c4a002f167d54ec9fd59de2ff2
-
SHA512
7c0bb9281d2949f9668edaa4095a0c1963386d6d11e737b8def12b30f39bc76325fd73a54ecea5026c8582e23d7c4a30506b9a9dc4b78e226a0d722bb054e508
-
SSDEEP
12288:c4ahKhHAC83UAzQzWXvibmWWsJMkwnkx:c4L83hz7E9JM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c6f5555e230665b1554917f77ca327f4e1042c4a002f167d54ec9fd59de2ff2
Files
-
1c6f5555e230665b1554917f77ca327f4e1042c4a002f167d54ec9fd59de2ff2.exe windows x86
efabbc75a6445136f9c3983eaff9c04a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
RegisterClassA
gdi32
SelectClipRgn
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recvfrom
comdlg32
GetFileTitleA
Sections
.text Size: 429KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 719KB - Virtual size: 720KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE