Static task
static1
Behavioral task
behavioral1
Sample
1ac40b21f8d9efc8d9ff5be636ff632d4e05e3631949f23f2a6da2c301cafcae.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
1ac40b21f8d9efc8d9ff5be636ff632d4e05e3631949f23f2a6da2c301cafcae.exe
Resource
win10v2004-20231023-en
General
-
Target
1ac40b21f8d9efc8d9ff5be636ff632d4e05e3631949f23f2a6da2c301cafcae
-
Size
172KB
-
MD5
f86f204de2c32db41cdda0c41b098299
-
SHA1
a5fe0e831f0744b88397d4a7abf0f701c7dfb11e
-
SHA256
1ac40b21f8d9efc8d9ff5be636ff632d4e05e3631949f23f2a6da2c301cafcae
-
SHA512
e1c7403b559620b6585d366b616fbab8cd609a90d7787772957a385bf0e96b6ec712fb4a4da1ee7377e588f1646ba6dd5d912f3ef6c7f8870ca881b87d6f70cc
-
SSDEEP
3072:FgSJz1AlHQ5JKaWLwgPmJMR5vcVBSTtfcM:d1MQWuBSmM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ac40b21f8d9efc8d9ff5be636ff632d4e05e3631949f23f2a6da2c301cafcae
Files
-
1ac40b21f8d9efc8d9ff5be636ff632d4e05e3631949f23f2a6da2c301cafcae.exe windows:4 windows x86
3e39eed85566a79862fbdc283ecfabcc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42d
ord1310
ord3069
ord3944
ord3670
ord2076
ord1566
ord5078
ord3002
ord4064
ord1344
ord4191
ord1830
ord1631
ord4205
ord2340
ord2481
ord2584
ord3691
ord2473
ord2585
ord2341
ord2432
ord2339
ord3143
ord3144
ord3142
ord2431
ord3367
ord3786
ord3658
ord1952
ord1228
ord4492
ord2875
ord684
ord574
ord736
ord492
ord317
ord728
ord1748
ord1766
ord1772
ord1747
ord1770
ord1757
ord1857
ord3524
ord619
ord565
ord382
ord306
ord4896
ord4615
ord4606
ord3281
ord880
ord4645
ord2068
ord2435
ord813
ord2634
ord2383
ord1790
ord4720
ord3287
ord2168
ord485
ord4061
ord823
ord734
ord1136
ord2044
ord901
ord487
ord1608
ord450
ord1768
ord5056
ord3803
ord3552
ord5077
ord3702
ord1880
ord1860
ord4415
ord3231
ord1033
ord4130
ord1789
ord2661
ord4227
ord4229
ord2104
ord3366
ord3826
ord2078
ord4215
ord4408
ord3784
ord3657
ord2021
ord1285
ord2986
ord706
ord528
ord2052
ord4630
ord1787
ord714
ord3403
ord4403
ord4302
ord2295
ord1135
ord3432
ord1087
ord4676
ord1212
ord3355
ord3447
ord3070
ord4053
ord3960
ord646
ord1906
ord3201
ord5072
ord2324
ord454
ord4475
ord2993
ord413
ord3365
ord4756
ord1365
ord3640
ord4216
ord2024
ord1288
ord2863
ord596
ord559
ord3427
ord349
ord299
ord1809
ord2991
ord3553
ord1661
ord2659
ord1041
ord2517
ord1896
ord558
ord1934
ord877
ord3097
ord1729
ord298
ord3174
ord4566
ord449
ord2208
ord3889
ord4011
ord4231
ord3312
ord3400
ord3170
ord3690
ord3870
ord3867
ord3768
ord2123
ord4934
ord1922
ord3650
ord2972
ord496
ord688
ord3545
ord4932
ord5081
ord2612
ord4951
ord3291
ord1590
ord2370
ord4617
ord2385
ord1190
ord4208
ord3618
ord5076
ord4118
ord1781
ord4176
ord3651
ord1364
ord3362
ord4753
ord1862
ord3831
ord4017
ord3948
ord3629
ord4239
ord4195
ord1100
msvcrtd
strcmp
strlen
sprintf
__getmainargs
_initterm
_chkesp
_adjust_fdiv
_controlfp
_except_handler3
__set_app_type
__p__fmode
__CxxFrameHandler
__setusermatherr
_setmbcp
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
??3@YAXPAX@Z
_onexit
__dllonexit
_ftol
__p__commode
kernel32
GetModuleFileNameA
GetStartupInfoA
GetModuleHandleW
GetProcAddress
LocalFree
LocalUnlock
LocalLock
LocalAlloc
LoadLibraryA
MoveFileExA
CloseHandle
GetFileSize
FreeLibrary
CreateFileA
GetSystemDirectoryA
GetModuleHandleA
user32
SetCursor
GetCursorPos
wsprintfA
MessageBoxA
GetSysColor
GetSystemMetrics
mfco42d
ord798
mfcd42d
ord298
ord273
ord537
ord365
ord893
ord862
ord860
ord857
ord280
ord790
ord931
ord408
ord310
ord541
ord956
ord305
ord436
ord662
ord829
ord774
ord745
ord796
ord792
ord420
ord646
ord645
ord951
ord831
ord929
ord405
ord515
ord808
ord841
ord495
mfcn42d
ord277
Sections
.text Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ