Static task
static1
Behavioral task
behavioral1
Sample
180b8e90b28a30ae8cca827fa04380f672a495092f24e155a35c1d875b667524.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
180b8e90b28a30ae8cca827fa04380f672a495092f24e155a35c1d875b667524.exe
Resource
win10v2004-20230915-en
General
-
Target
180b8e90b28a30ae8cca827fa04380f672a495092f24e155a35c1d875b667524
-
Size
8.0MB
-
MD5
babe8214dc5847f3d2df0992f11cb0b3
-
SHA1
29164ff15192467c8c1580bc49c718b00c6c22af
-
SHA256
180b8e90b28a30ae8cca827fa04380f672a495092f24e155a35c1d875b667524
-
SHA512
bd74a94857ea2d9fc68478fe5959d374395662cdcc59ff814c8b003305dbc509613e445a07e8ca773ca3614d88b4c101efba33c6ff810d88ec98f8aab8592151
-
SSDEEP
196608:fUXFKT1HuERE+TyI18+2vXsSSOPcProO1ixlX9kZvkDiMLuIU+M2:smI3uh18rN9cProO29eZs+zIA2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 180b8e90b28a30ae8cca827fa04380f672a495092f24e155a35c1d875b667524
Files
-
180b8e90b28a30ae8cca827fa04380f672a495092f24e155a35c1d875b667524.exe windows:4 windows x86
69ed015a7889d5c7846e5378e1350813
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
GetPrivateProfileSectionA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
0 Size: 411KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 39KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 284KB - Virtual size: 38.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 32KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 39KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
6 Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
7 Size: 6KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE