Static task
static1
Behavioral task
behavioral1
Sample
1861b81617b06496d3c7e0eb03f1823c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1861b81617b06496d3c7e0eb03f1823c.exe
Resource
win10v2004-20231222-en
General
-
Target
1861b81617b06496d3c7e0eb03f1823c
-
Size
32KB
-
MD5
1861b81617b06496d3c7e0eb03f1823c
-
SHA1
f84cfae9e72c59c39ae554b7b9c69e5127756f62
-
SHA256
7e1b7fb87cea7cd5421f57a8c1522a36ff296ecb278ad5c1e59a5e8876ea2845
-
SHA512
1980aa2c5dbea03d5e3258e2293126547acd01ca8d5b2b23076c709d8ebc9d7f5ab56133ab50dce950883806c6a2d5f323ea8d8fb9388e767231e5e13b351715
-
SSDEEP
768:BSmBSQ1zBAsEGNRvijkI4eoIzRHZXH72UMMOkujn1rcsDf2:BSmBLBfviAX7Eb2LMLQ1rcsDf2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1861b81617b06496d3c7e0eb03f1823c
Files
-
1861b81617b06496d3c7e0eb03f1823c.exe windows:4 windows x86 arch:x86
f9cf19571807db46936a60907022d0c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_controlfp
user32
IsWindow
advapi32
RegOpenKeyExA
shell32
Shell_NotifyIconA
urlmon
URLDownloadToFileA
wininet
InternetCrackUrlA
ole32
CoInitializeEx
oleaut32
SysAllocString
version
GetFileVersionInfoSizeA
gdi32
GetDeviceCaps
Sections
.text Size: 27KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE