Static task
static1
Behavioral task
behavioral1
Sample
c43bba250ce6acf30f7d15a2f47c5695eed8df63370c6fd79a130a0fa5bdd3f8.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
c43bba250ce6acf30f7d15a2f47c5695eed8df63370c6fd79a130a0fa5bdd3f8.exe
Resource
win10v2004-20230703-en
General
-
Target
c43bba250ce6acf30f7d15a2f47c5695eed8df63370c6fd79a130a0fa5bdd3f8
-
Size
8.4MB
-
MD5
50fffcd852b92dd4ffd3298c8e3ef1f3
-
SHA1
17fbea146fc209ffc2fa90ccb81c31318486d9ad
-
SHA256
c43bba250ce6acf30f7d15a2f47c5695eed8df63370c6fd79a130a0fa5bdd3f8
-
SHA512
b0c5ebf25885f0055ec193b24c3da80e18a674691a88a132960b4fa7c4df34fffd11bdeab86f167a269c1651e7f10290c101ac618440e14da79179791867311e
-
SSDEEP
196608:DmBRzFvuvGHqSYeRs3XGlckQb01Ld8nWKfQ0fbADur+4U:DmDluvqqARIXeD78dQkA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c43bba250ce6acf30f7d15a2f47c5695eed8df63370c6fd79a130a0fa5bdd3f8
Files
-
c43bba250ce6acf30f7d15a2f47c5695eed8df63370c6fd79a130a0fa5bdd3f8.exe windows x86
17bf675c29b8c3d41e1510214131ac26
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
HideCaret
advapi32
RegOpenKeyExA
ole32
OleCreateMenuDescriptor
oleaut32
VariantClear
msimg32
TransparentBlt
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
winmm
PlaySoundA
gdiplus
GdipGetImageWidth
oleacc
CreateStdAccessibleObject
imm32
ImmReleaseContext
gdi32
CreateRectRgnIndirect
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
shell32
SHGetFileInfoA
Sections
.text Size: 8.4MB - Virtual size: 12.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE