Static task
static1
Behavioral task
behavioral1
Sample
c15eba893b99a8fe3575459b33d5f535717d8b63e79e28078ef0b37edd3ff27a.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c15eba893b99a8fe3575459b33d5f535717d8b63e79e28078ef0b37edd3ff27a.exe
Resource
win10v2004-20230915-en
General
-
Target
c15eba893b99a8fe3575459b33d5f535717d8b63e79e28078ef0b37edd3ff27a
-
Size
1.6MB
-
MD5
794f01fb4b17dbde63908cc076f67096
-
SHA1
039b079cf3420ae70156fbd2db2da3d8f2a95528
-
SHA256
c15eba893b99a8fe3575459b33d5f535717d8b63e79e28078ef0b37edd3ff27a
-
SHA512
dbd0c0911f35b30746c25c46fede6ee07bb2272c69c6d0d2b199b09d4fb3243bd90e2399295919cb9dee99867d25a7a1833716368c065039b720a346b7b520f2
-
SSDEEP
49152:uS21MxgPL6myGeQGe5PwXkz+9ujkDQ8kLPz6ZRre:fNx4JyzJybC9qk85Cj6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c15eba893b99a8fe3575459b33d5f535717d8b63e79e28078ef0b37edd3ff27a
Files
-
c15eba893b99a8fe3575459b33d5f535717d8b63e79e28078ef0b37edd3ff27a.exe windows x86
54b79fa562da425eb06a0deb0db5975b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamOut
ws2_32
WSACleanup
kernel32
GetTimeZoneInformation
user32
GetSystemMenu
gdi32
LineTo
winspool.drv
OpenPrinterA
advapi32
RegOpenKeyExA
shell32
DragFinish
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_GetImageCount
comdlg32
ChooseColorA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 660KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 992KB - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ