Static task
static1
Behavioral task
behavioral1
Sample
1b57b0e7e340fa490b1df637072536816ff572589f01de4627e26d787baceeb2.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1b57b0e7e340fa490b1df637072536816ff572589f01de4627e26d787baceeb2.exe
Resource
win10v2004-20230703-en
General
-
Target
1b57b0e7e340fa490b1df637072536816ff572589f01de4627e26d787baceeb2
-
Size
4.2MB
-
MD5
cce8be3b610e86b09a4e2abbc97ae10a
-
SHA1
8f3f7bdbf62180db04199042e40e25d26a79f31c
-
SHA256
1b57b0e7e340fa490b1df637072536816ff572589f01de4627e26d787baceeb2
-
SHA512
2767c625b97f7f2228fdaae5e7c67d636299a5fcfaea67fd4ceea938dfd5953008e7f02874aa0fac4ec83217dd1873a6896fb61baaf18c98f0a6729ff79ab770
-
SSDEEP
98304:Yz4SeqXsy8HeE5gwAAvAFQ2azMdheH8ik32O5rvxNkcWNuPZ:Y8wsJ+QKCa0/qDvYNuR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b57b0e7e340fa490b1df637072536816ff572589f01de4627e26d787baceeb2
Files
-
1b57b0e7e340fa490b1df637072536816ff572589f01de4627e26d787baceeb2.exe windows x86
102e33042a81e7b4a5bcc96438e9a9d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSAAsyncSelect
rasapi32
RasGetConnectStatusA
kernel32
GetSystemDirectoryA
user32
DeleteMenu
gdi32
ExtSelectClipRgn
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueExA
shell32
SHGetSpecialFolderPathA
ole32
StgCreateDocfileOnILockBytes
oleaut32
SafeArrayGetUBound
comctl32
ImageList_GetIcon
oledlg
ord8
wininet
InternetCanonicalizeUrlA
comdlg32
GetFileTitleA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.6MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ