Static task
static1
Behavioral task
behavioral1
Sample
19ff73117325f5c864f204429f6dab10f58bd16896c9b6f53a50baded594d1b6.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
19ff73117325f5c864f204429f6dab10f58bd16896c9b6f53a50baded594d1b6.exe
Resource
win10v2004-20231023-en
General
-
Target
19ff73117325f5c864f204429f6dab10f58bd16896c9b6f53a50baded594d1b6
-
Size
3.5MB
-
MD5
2b345d7415d6668fe2709f0b5b1b3fea
-
SHA1
fb3746ab66aced57473f2912bd35590da922a802
-
SHA256
19ff73117325f5c864f204429f6dab10f58bd16896c9b6f53a50baded594d1b6
-
SHA512
4e7b778efff807e3af6786e345b6e9e526e4c1958598dac99c5af1def4902a16d2c77d94c86fe02b7e1a186b9b3a5ad69cf373f8294388671ebb8ba08d4eae4a
-
SSDEEP
98304:3aLRgby9QpuksYq+iRRM4lNwwO32LhmveqygxXWI+:3aqb8x7AJ3ivU7+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 19ff73117325f5c864f204429f6dab10f58bd16896c9b6f53a50baded594d1b6
Files
-
19ff73117325f5c864f204429f6dab10f58bd16896c9b6f53a50baded594d1b6.exe windows:5 windows x86
c688b291e1908109c55ace35c3670a27
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
user32
IsZoomed
gdi32
BitBlt
advapi32
RegSetValueExA
ole32
DoDragDrop
oleaut32
SystemTimeToVariantTime
msimg32
TransparentBlt
comctl32
ImageList_GetIconSize
shlwapi
PathFindExtensionA
wininet
InternetReadFile
oleacc
CreateStdAccessibleObject
gdiplus
GdipCreateBitmapFromStream
imm32
ImmReleaseContext
winmm
mciSendCommandA
winspool.drv
DocumentPropertiesA
comdlg32
GetFileTitleA
shell32
SHBrowseForFolderA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.MPRESS1 Size: 2.7MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 750KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ