Static task
static1
Behavioral task
behavioral1
Sample
11dca920cd19ae07a2b8c61d4820e3d6e477f2b7d4e7532db6d6ee2ae0cbd7a1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
11dca920cd19ae07a2b8c61d4820e3d6e477f2b7d4e7532db6d6ee2ae0cbd7a1.exe
Resource
win10v2004-20230915-en
General
-
Target
11dca920cd19ae07a2b8c61d4820e3d6e477f2b7d4e7532db6d6ee2ae0cbd7a1
-
Size
11.0MB
-
MD5
c4c87e17a517b8aac71949e51f975d5b
-
SHA1
a847348ca61ed2ca0d568b598d642b943f9ea415
-
SHA256
11dca920cd19ae07a2b8c61d4820e3d6e477f2b7d4e7532db6d6ee2ae0cbd7a1
-
SHA512
bcca8bdf6ddf0505a7ec0e60876d6754a47856adcf2d69b53beb733432449044df319b4846958c62bc2b1ba6f8cfae93c5697874c9e624aa9130f37a6f0d387d
-
SSDEEP
196608:SHuDnsCMq5eEGAF/jGR7gWy9z928qcuJNhPAFqtbr5lK:PHMqQ7Q/jegZ992rAFqtXS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11dca920cd19ae07a2b8c61d4820e3d6e477f2b7d4e7532db6d6ee2ae0cbd7a1
Files
-
11dca920cd19ae07a2b8c61d4820e3d6e477f2b7d4e7532db6d6ee2ae0cbd7a1.exe windows:5 windows x86
25c8bd1929e5a4ba0c8b616d609432c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetVersionExA
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ShowWindow
SetWindowRgn
CharUpperBuffW
gdi32
SelectObject
ExtTextOutA
gdiplus
GdipCreateFromHDC
ole32
CoCreateInstance
imm32
ImmSetCompositionWindow
shell32
ShellExecuteA
DragAcceptFiles
shlwapi
PathFileExistsA
winmm
PlaySoundA
midiOutReset
winspool.drv
ClosePrinter
advapi32
RegCloseKey
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Add
ws2_32
WSACleanup
comdlg32
GetFileTitleA
Sections
.text Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 11.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 558KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Cecing0 Size: - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Cecing1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Cecing2 Size: 10.9MB - Virtual size: 10.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 104KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ