Static task
static1
Behavioral task
behavioral1
Sample
14be1400bd983457dbbaa69ae15b888cb54a34ae02da49088c07f289d3759cc1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
14be1400bd983457dbbaa69ae15b888cb54a34ae02da49088c07f289d3759cc1.exe
Resource
win10v2004-20230915-en
General
-
Target
14be1400bd983457dbbaa69ae15b888cb54a34ae02da49088c07f289d3759cc1
-
Size
959KB
-
MD5
4b12a01d7d7127ee9bc517791b4671dd
-
SHA1
73db67072495a4d6c8878d1ffcf7da6bce5fa3f0
-
SHA256
14be1400bd983457dbbaa69ae15b888cb54a34ae02da49088c07f289d3759cc1
-
SHA512
4277d756ef7266d1f87ae42c3e96a8c567a3f333b71155f5b2c5675c6b13e1337745c1f2c6e270178f8c0a1c44295784c99f666ed41c985c6674fdc448a70409
-
SSDEEP
24576:CWRbJoex3VBu3ojRzVEKIC6weQWXCvcJU:VXAoFzVEKIC6weQWXCkJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14be1400bd983457dbbaa69ae15b888cb54a34ae02da49088c07f289d3759cc1
Files
-
14be1400bd983457dbbaa69ae15b888cb54a34ae02da49088c07f289d3759cc1.exe windows:6 windows x64
6402747fb6652d8165d894f266d0ea46
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntdll
memmove
strcmp
wcslen
memcmp
memset
strncmp
strlen
strcpy
strcat
strstr
strrchr
__chkstk
memcpy
kernel32
GetCurrentThread
GetPriorityClass
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateToolhelp32Snapshot
Process32First
Process32Next
Module32FirstW
Module32NextW
GetCurrentProcess
GetLastError
GetTickCount64
GetCurrentThreadId
Sleep
GetCurrentProcessId
gdi32
CreatePen
GetDIBits
GetDeviceCaps
TextOutW
MoveToEx
SetTextColor
StretchDIBits
SetBkMode
SetBkColor
SelectObject
Rectangle
LineTo
DeleteObject
DeleteDC
CreateFontW
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateSolidBrush
Sections
.text Size: 398KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 238KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ