Static task
static1
Behavioral task
behavioral1
Sample
1e6714401c2c58ba80276ff986970f685641cf09de6d5a69cc28b581fe73bf1e.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1e6714401c2c58ba80276ff986970f685641cf09de6d5a69cc28b581fe73bf1e.exe
Resource
win10v2004-20230915-en
General
-
Target
1e6714401c2c58ba80276ff986970f685641cf09de6d5a69cc28b581fe73bf1e
-
Size
491KB
-
MD5
c8e11b98a320b03e77e17e8d1388117e
-
SHA1
46f85a1e5784091fd75a78159306ac2118dc0f72
-
SHA256
1e6714401c2c58ba80276ff986970f685641cf09de6d5a69cc28b581fe73bf1e
-
SHA512
2b65478a5d5a2d683e2a747ad0e32e895f83e3b3a5d7e3469724a07aaaeb428aeaad358b8eba10592300aad1d983daebac96c8137c51742dd24b90c68b3dcfdf
-
SSDEEP
6144:ff1CKJPHxzWNgigc2AL6AUimJtMgelSLqTOWzI1q4syRzLi:HkKJ/xzWNCAL61iXgelSL4zr2i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e6714401c2c58ba80276ff986970f685641cf09de6d5a69cc28b581fe73bf1e
Files
-
1e6714401c2c58ba80276ff986970f685641cf09de6d5a69cc28b581fe73bf1e.exe windows:4 windows x86
ae0a5112fe1176f4e5f6e1bc95e4c209
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Sections
pec1 Size: 472KB - Virtual size: 476KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE