Static task
static1
Behavioral task
behavioral1
Sample
361b1962e03a12ffb17e6710e097760bbb9bad0481173120842004961459206b.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
361b1962e03a12ffb17e6710e097760bbb9bad0481173120842004961459206b.exe
Resource
win10v2004-20230703-en
General
-
Target
361b1962e03a12ffb17e6710e097760bbb9bad0481173120842004961459206b
-
Size
7.6MB
-
MD5
1c40cd9aefaef33c3b386edd1ab151ed
-
SHA1
29b02c60aaa39b3cbb2cda7a5165f50eaa475a10
-
SHA256
361b1962e03a12ffb17e6710e097760bbb9bad0481173120842004961459206b
-
SHA512
ff3244902426695062bdf53cb5f22f57683cb52a4b62c877734bf98c948131da7011ae08281c80464e7d290173775c457595f782aa1d1e2b81ad3f269d6787e3
-
SSDEEP
196608:jBPGxQRdYRbSgbptmFhx6QScZBzD8SnJNJoJmPtstz:jBeSeRlQ3x6Q/PzD8Sn7J2mPtUz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 361b1962e03a12ffb17e6710e097760bbb9bad0481173120842004961459206b
Files
-
361b1962e03a12ffb17e6710e097760bbb9bad0481173120842004961459206b.exe windows x86
0689d88d0b66ac9b0c5469b5bb70ecb5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
VirtualProtect
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateFileA
CreateFileW
WriteFile
CloseHandle
GetLocalTime
VirtualQuery
CreateFileMappingW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
GetSystemInfo
VirtualProtectEx
user32
wsprintfA
shlwapi
ord158
msvbvm60
EVENT_SINK_GetIDsOfNames
Sections
.text Size: - Virtual size: 9.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 216KB - Virtual size: 215KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ