Static task
static1
Behavioral task
behavioral1
Sample
1df01a24b453a5c0d356660e4641486da32ee543730b7fcfcd719eee64778d7b.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
1df01a24b453a5c0d356660e4641486da32ee543730b7fcfcd719eee64778d7b.exe
Resource
win10v2004-20231020-en
General
-
Target
1df01a24b453a5c0d356660e4641486da32ee543730b7fcfcd719eee64778d7b
-
Size
13.3MB
-
MD5
1da6ffb2fea6adbbf91cbc7ea5547166
-
SHA1
59e9e7e9a43f4add87b5f57d410df6afec934b1b
-
SHA256
1df01a24b453a5c0d356660e4641486da32ee543730b7fcfcd719eee64778d7b
-
SHA512
d28ac75ecb90c61960befb97a53a24c873e55c8ce98d3cc17ba0bdbb88aa00f545451bdeb6bc6a51276827b5fb816064f49a46227493e9f0823e5535850fd492
-
SSDEEP
196608:AKzhS0dZZCYNxl0gShtfdZaLLwUA13OqAgOCPnNqTTtZy7SKRT0JmnVEb4FYhur:fSq90gSjFZELwX13nbN7BR4Jmu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1df01a24b453a5c0d356660e4641486da32ee543730b7fcfcd719eee64778d7b
Files
-
1df01a24b453a5c0d356660e4641486da32ee543730b7fcfcd719eee64778d7b.exe windows:6 windows x86 arch:x86
a7d154b59eeecbf8519595d428e876a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStringToAddressW
kernel32
GetVersionExW
user32
MessageBoxW
advapi32
CryptCreateHash
ole32
OleLockRunning
shlwapi
StrCmpW
gdiplus
GdipFree
winmm
PlaySoundW
bcrypt
BCryptDestroyHash
winhttp
WinHttpSetCredentials
crypt32
CertFreeCertificateChain
gdi32
GetDeviceCaps
shell32
DragQueryFileW
oleaut32
SysAllocString
comctl32
InitCommonControlsEx
imm32
ImmGetContext
Sections
.text Size: - Virtual size: 3.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.k~p Size: - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.8i Size: 512B - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.|5h Size: 13.1MB - Virtual size: 13.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 116KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ