h
Static task
static1
Behavioral task
behavioral1
Sample
181ca15bc4bdde82afee568adfa133687be47b23c42565e5034f25be77296740.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
181ca15bc4bdde82afee568adfa133687be47b23c42565e5034f25be77296740.exe
Resource
win10v2004-20231020-en
General
-
Target
181ca15bc4bdde82afee568adfa133687be47b23c42565e5034f25be77296740
-
Size
11.2MB
-
MD5
3b92580f64267d14357db08cd1606120
-
SHA1
31c0a5c07a3daae0d104f0a0ed790e7d85f3ec9d
-
SHA256
181ca15bc4bdde82afee568adfa133687be47b23c42565e5034f25be77296740
-
SHA512
92d341849a4704513d5215f46cf1b369d72a040012d23b8d562c31078d0583b91c7d45d6d880976eb4d5b7ae0f37e3e4586e0251279d56e3354f5e568cd37f04
-
SSDEEP
1536:S8TmBIho1tWbUTN108XOxeP8Vzim18+MHpShmKFWTWCg1IEOxBIhZZCt:16Oi0UpDexBNNcowKMTWB1InxOZZCt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 181ca15bc4bdde82afee568adfa133687be47b23c42565e5034f25be77296740
Files
-
181ca15bc4bdde82afee568adfa133687be47b23c42565e5034f25be77296740.exe windows:5 windows x86
c95404c35cff1432fe8e340fcc9b653d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLocalTime
LeaveCriticalSection
GetTickCount
HeapAlloc
OpenFileMappingW
lstrlenA
WaitNamedPipeA
OpenWaitableTimerA
CreateMutexA
TlsGetValue
lstrlenA
GetProcAddress
CreateFileMappingA
GetStartupInfoW
WriteFile
AllocConsole
DeleteFileA
GetStringTypeW
LoadLibraryExW
LoadLibraryA
lstrlenA
GetVersionExW
user32
LoadMenuA
InsertMenuA
GetDlgItemTextW
IsDialogMessageA
GetPropW
DispatchMessageW
IsCharLowerW
PeekMessageA
LoadIconA
GetClassLongA
rsaenh
CPDeriveKey
CPCreateHash
CPEncrypt
CPDecrypt
crypt32
CryptFindOIDInfo
CryptMemAlloc
CertAlgIdToOID
CertFreeCRLContext
CertDuplicateCRLContext
CertSaveStore
CertDeleteCRLFromStore
CertControlStore
CertNameToStrA
CertOpenStore
CertFindAttribute
CertFindChainInStore
CertCreateCTLContext
CertCreateContext
CertGetNameStringA
CertDuplicateStore
CertFindExtension
cmpbk32
PhoneBookFreeFilter
PhoneBookCopyFilter
dsprop
FindSheet
CrackName
certcli
CACloseCA
CADeleteCA
Exports
Exports
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_MEM_READ
.ydata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11.1MB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ