Static task
static1
Behavioral task
behavioral1
Sample
1c98e1063434ca9e34ec11a19fd44ea6c87b6b68a4dabf5f932bf65dee26ec71.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
1c98e1063434ca9e34ec11a19fd44ea6c87b6b68a4dabf5f932bf65dee26ec71.exe
Resource
win10v2004-20230703-en
General
-
Target
1c98e1063434ca9e34ec11a19fd44ea6c87b6b68a4dabf5f932bf65dee26ec71
-
Size
14.9MB
-
MD5
7799cf96a18f515f5df88426f676b725
-
SHA1
02007e05447d08d190db88bcb61d28726016ccf9
-
SHA256
1c98e1063434ca9e34ec11a19fd44ea6c87b6b68a4dabf5f932bf65dee26ec71
-
SHA512
fd314a2dda4ab36149dcb046cd573fe91bce15c683224723e6f8b2a713adb9a20506055017174e08b1ae3b76bd3cb2f990599d084bb5176e017d73ba290e7ec0
-
SSDEEP
393216:mLC86G1ss/hh5dafXSSxmAx39W/XegZy8:G2G1ss/hBafXZxB39Zi/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c98e1063434ca9e34ec11a19fd44ea6c87b6b68a4dabf5f932bf65dee26ec71
Files
-
1c98e1063434ca9e34ec11a19fd44ea6c87b6b68a4dabf5f932bf65dee26ec71.exe windows x86
447bad7a593d37426ad67713825bca48
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetPrivateProfileStringA
user32
MessageBoxA
WinHelpA
winmm
midiStreamOut
ws2_32
htonl
rasapi32
RasHangUpA
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
DragFinish
ole32
CLSIDFromProgID
oleaut32
VariantClear
comctl32
ImageList_Add
wininet
InternetCanonicalizeUrlA
comdlg32
GetOpenFileNameA
Sections
.text Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 681KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.svmp1 Size: - Virtual size: 2.1MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp2 Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp3 Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svmp4 Size: 11.2MB - Virtual size: 11.2MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE