Static task
static1
Behavioral task
behavioral1
Sample
1267e750b2c8b9534eab11d91452af30fad77d6582747bf07df5d740223ff01b.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1267e750b2c8b9534eab11d91452af30fad77d6582747bf07df5d740223ff01b.exe
Resource
win10v2004-20230703-en
General
-
Target
1267e750b2c8b9534eab11d91452af30fad77d6582747bf07df5d740223ff01b
-
Size
1.1MB
-
MD5
1d7c3e585bdf96c815c4cb61f541bf86
-
SHA1
c1ea27eead72571e38a572a3205a19a8a13c2704
-
SHA256
1267e750b2c8b9534eab11d91452af30fad77d6582747bf07df5d740223ff01b
-
SHA512
5c03cb862f23631feea1c830dda5e99174221cb2a226b0d2e4f00f71967970f62ab4239d77688f052ea500a3ce1cf3b6b6e992dd723a4f90f603ee2cf7c640e4
-
SSDEEP
24576:VoTK2mT845ihAXcgv6rkgW3RPLyX46S+xu3S7vUbDawo7WVY43:qK2mTP2qv6rkh3RPl6lxPKOI5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1267e750b2c8b9534eab11d91452af30fad77d6582747bf07df5d740223ff01b
Files
-
1267e750b2c8b9534eab11d91452af30fad77d6582747bf07df5d740223ff01b.exe windows x86
b70a5c3df2fb546792d4acbec9951bb0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.data Size: 376KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sedata Size: 735KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ