Static task
static1
Behavioral task
behavioral1
Sample
1c8af8bda66d1d497acffd300bf8a1e700f16944c30211de5604ea6ed157a563.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
1c8af8bda66d1d497acffd300bf8a1e700f16944c30211de5604ea6ed157a563.exe
Resource
win10v2004-20231020-en
General
-
Target
1c8af8bda66d1d497acffd300bf8a1e700f16944c30211de5604ea6ed157a563
-
Size
19KB
-
MD5
0bbe1671828e3b50394ee18568350420
-
SHA1
82bc6c4982149daa7f6e629543e801d407edc2e8
-
SHA256
1c8af8bda66d1d497acffd300bf8a1e700f16944c30211de5604ea6ed157a563
-
SHA512
e9e4dea56e1b384255612f57841595459886a8a17e7944dc772bb26c6491389a05469e8e4d1da4d2ccde2f84c30c1b8bd1a5ae29cfc79bb31be22b980a4d91f3
-
SSDEEP
384:yaLIUce8ayU2myMCiQwhrAw/KLs+UtshT:ytYrQ+r1ta
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c8af8bda66d1d497acffd300bf8a1e700f16944c30211de5604ea6ed157a563
Files
-
1c8af8bda66d1d497acffd300bf8a1e700f16944c30211de5604ea6ed157a563.exe windows:4 windows x86
a0783c5afa68493de19d2f9b8d08e76b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetProcAddress
Sleep
GetModuleFileNameA
GetPrivateProfileStringA
DeleteFileA
WritePrivateProfileStringA
ReadFile
GetProcessHeap
CreateFileA
WriteFile
GetCommandLineA
FreeLibrary
LoadLibraryA
LCMapStringA
lstrcpyn
CloseHandle
LocalFree
LocalAlloc
OpenProcess
GetCurrentProcess
GetFileSize
user32
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
GetMessageA
PeekMessageA
msvcrt
strstr
realloc
free
strchr
strrchr
_ftol
atoi
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
shlwapi
PathFileExistsA
shell32
ShellExecuteA
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ