Static task
static1
Behavioral task
behavioral1
Sample
13b2cf585b040413f1b7f3415bb90a9f64181d016528271002fecf4e89b0f17c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
13b2cf585b040413f1b7f3415bb90a9f64181d016528271002fecf4e89b0f17c.exe
Resource
win10v2004-20230915-en
General
-
Target
13b2cf585b040413f1b7f3415bb90a9f64181d016528271002fecf4e89b0f17c
-
Size
8.5MB
-
MD5
64daae0aa84d8b6d335525f924ac0712
-
SHA1
6eadd512d682295527b5a355b63b349070faf783
-
SHA256
13b2cf585b040413f1b7f3415bb90a9f64181d016528271002fecf4e89b0f17c
-
SHA512
bea534184d74da018b3978ba4537e1e097ec368cd39c80fc15bb4f479ab9e7eb016f16475740079ae5a5fb9e0442275cc2ed3adf608fd6a54c7992f6253a2f7b
-
SSDEEP
196608:K/2NgIVxb54M8li1kCmvCGddyaGSXZys3i5Wjtje0UwyP:K/2NgeL3UlyaGcZfrBy5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13b2cf585b040413f1b7f3415bb90a9f64181d016528271002fecf4e89b0f17c
Files
-
13b2cf585b040413f1b7f3415bb90a9f64181d016528271002fecf4e89b0f17c.exe windows x86
fe09c77fe47f551e9b5578a34e77757f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DestroyIcon
gdi32
CreateDCA
gdiplus
GdipGetStringFormatAlign
kernel32
GetFileSize
ole32
CreateStreamOnHGlobal
shell32
DragFinish
imm32
ImmReleaseContext
shlwapi
PathFileExistsA
winmm
timeBeginPeriod
advapi32
OpenSCManagerA
ws2_32
WSAStartup
version
GetFileVersionInfoA
wininet
InternetReadFile
winhttp
WinHttpQueryHeaders
oleaut32
SafeArrayGetElemsize
psapi
GetModuleFileNameExA
dbghelp
MakeSureDirectoryPathExists
comctl32
ImageList_GetIconSize
urlmon
URLDownloadToFileA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
Sections
.text Size: 7.8MB - Virtual size: 9.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 744KB - Virtual size: 744KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ