Static task
static1
Behavioral task
behavioral1
Sample
1a5a583caf1698480494dfd87f2a7c3c97e1905055aeaefc024320bca185b2f4.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
1a5a583caf1698480494dfd87f2a7c3c97e1905055aeaefc024320bca185b2f4.exe
Resource
win10v2004-20231023-en
General
-
Target
1a5a583caf1698480494dfd87f2a7c3c97e1905055aeaefc024320bca185b2f4
-
Size
1.6MB
-
MD5
59a1db044d66f5021d052095b2cf7bf5
-
SHA1
560aae4c56eb0533543b159b751533519bc38d7b
-
SHA256
1a5a583caf1698480494dfd87f2a7c3c97e1905055aeaefc024320bca185b2f4
-
SHA512
86caed1f7454320c32ce46866a5b133a46dcad4add0bec8d2b5ef18d814e9b6ecf56d5deb3bebd3815272f2135d6c456ccf953a7ee886b8c7daaaba507a3adc4
-
SSDEEP
24576:lN8ctmH965N4MObqgEQIkH9upVchbgZkcJ1jwZXOwr7JwRX00+FwfAJdqOBrPR:lN8ctm05u5fvdi/kMGVx08wI3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a5a583caf1698480494dfd87f2a7c3c97e1905055aeaefc024320bca185b2f4
Files
-
1a5a583caf1698480494dfd87f2a7c3c97e1905055aeaefc024320bca185b2f4.exe windows:6 windows x86
d5785b08bc7e1e7b2d5286cbc973aebe
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
winmm
sndPlaySoundW
oleacc
LresultFromObject
shlwapi
PathIsRelativeW
winspool.drv
DocumentPropertiesW
comdlg32
FindTextW
comctl32
FlatSB_SetScrollInfo
shell32
DragFinish
user32
CopyImage
version
GetFileVersionInfoSizeW
oleaut32
GetErrorInfo
advapi32
RegSetValueExW
msvcrt
memcpy
ole32
RevokeDragDrop
gdi32
Pie
Sections
.text Size: 1.5MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE