Static task
static1
Behavioral task
behavioral1
Sample
1bce8655313f3f15a1c7388d1dee935ddffdd0ed948f45f8a3f9e4eda85ec53c.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1bce8655313f3f15a1c7388d1dee935ddffdd0ed948f45f8a3f9e4eda85ec53c.exe
Resource
win10v2004-20230915-en
General
-
Target
1bce8655313f3f15a1c7388d1dee935ddffdd0ed948f45f8a3f9e4eda85ec53c
-
Size
3.1MB
-
MD5
f33a446d10dc270ea6dc4321b76b5cd4
-
SHA1
e7f5ebaa4efa017ef5476518f8b6f1ef6d86261c
-
SHA256
1bce8655313f3f15a1c7388d1dee935ddffdd0ed948f45f8a3f9e4eda85ec53c
-
SHA512
76ecedaabb41375a72bfca5f197359d9d6dfe4c57173d697d616edd7a18efa3e228428ee49d3b4914fb3592399478303ecc1ca03282256abc2efb279d88e3ec7
-
SSDEEP
49152:I1QS8hbCYMgBAvdRjExOHu8k/QUqHNkVA6Tkin+dQyg2g1zoOcJ1w7fmJIrivWM9:I1x8RCkKvQxt8kgNQOzgyb6HsWM/1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bce8655313f3f15a1c7388d1dee935ddffdd0ed948f45f8a3f9e4eda85ec53c
Files
-
1bce8655313f3f15a1c7388d1dee935ddffdd0ed948f45f8a3f9e4eda85ec53c.exe windows x64
38600ef14e505925cc81cbd8aeec4911
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
OutputDebugStringW
user32
GetDlgCtrlID
gdi32
SetBkMode
comdlg32
GetOpenFileNameW
advapi32
RegQueryValueExW
shell32
ShellExecuteW
ole32
CoTaskMemFree
oleaut32
VarUI4FromStr
shlwapi
SHSetValueW
comctl32
InitCommonControlsEx
version
GetFileVersionInfoSizeW
iphlpapi
GetInterfaceInfo
msvcrt
_wcsnicmp
psapi
GetMappedFileNameW
Sections
.text Size: 1.5MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ