Static task
static1
Behavioral task
behavioral1
Sample
ca132cf47b5c8650e8fa765b38ca5f8e9ddcb58e3d304c285f0bde9966e0183e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ca132cf47b5c8650e8fa765b38ca5f8e9ddcb58e3d304c285f0bde9966e0183e.exe
Resource
win10v2004-20230915-en
General
-
Target
ca132cf47b5c8650e8fa765b38ca5f8e9ddcb58e3d304c285f0bde9966e0183e
-
Size
7.5MB
-
MD5
3aec59d19b92ab88ab2faa49b48cca98
-
SHA1
ea540a457f5ac4cc7264781ee2db766024efcdcd
-
SHA256
ca132cf47b5c8650e8fa765b38ca5f8e9ddcb58e3d304c285f0bde9966e0183e
-
SHA512
61b000d3418d0fcc7b103c5c7e0767247ce4cd9eeb5b78fe7f9184b2696aba22e4b940ed8fc5938347ae44e7c83e704a73ffa8724c05a15114ce7c4ebcec9b5e
-
SSDEEP
196608:8iklC/kiTLAIFl+2oXY97diZ/0vWW0U2YMr9/KNtB7qH2hDq:qIciIIFlooiZ/Cp2YMr+D22hDq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ca132cf47b5c8650e8fa765b38ca5f8e9ddcb58e3d304c285f0bde9966e0183e
Files
-
ca132cf47b5c8650e8fa765b38ca5f8e9ddcb58e3d304c285f0bde9966e0183e.exe windows:6 windows x64
ca326a4876b453e09d5ab711189e83b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
wldap32
ord41
bcrypt
BCryptGenRandom
oleacc
CreateStdAccessibleObject
dbghelp
SymCleanup
dwrite
DWriteCreateFactory
d2d1
ord1
uiautomationcore
UiaRaiseAutomationEvent
oleaut32
SysFreeString
ole32
PropVariantClear
uxtheme
IsThemeBackgroundPartiallyTransparent
shell32
SetCurrentProcessExplicitAppUserModelID
advapi32
CryptAcquireContextA
winspool.drv
ClosePrinter
comdlg32
GetSaveFileNameW
gdi32
GetTextFaceW
user32
GetMenuDefaultItem
kernel32
LoadLibraryExA
dwmapi
DwmEnableBlurBehindWindow
imm32
ImmSetCompositionWindow
msimg32
AlphaBlend
comctl32
_TrackMouseEvent
gdiplus
GdipGetPenDashCap197819
shlwapi
StrCpyNW
crypt32
CertOpenStore
winmm
timeSetEvent
ws2_32
listen
Sections
.text Size: - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 857KB - Virtual size: 856KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ