Static task
static1
Behavioral task
behavioral1
Sample
01c0690c7af95767c6872233acc955e7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
01c0690c7af95767c6872233acc955e7.exe
Resource
win10v2004-20231222-en
General
-
Target
01c0690c7af95767c6872233acc955e7
-
Size
209KB
-
MD5
01c0690c7af95767c6872233acc955e7
-
SHA1
13170f801d01bbe55c149af58e020d56dc575679
-
SHA256
7f151fc213b32c30b6b70b9ba766f107a701c0d44ed94ae4ab8b6ef6f31e8301
-
SHA512
b062f2b4aaff9387bc11e87095551335914abf1e4e12290ca268123bd98ee69aafb21828bab2b83ecc1fc36e493aa7d79033b8bbcab93567844f9803b38fd061
-
SSDEEP
3072:Ml/Oe4EgpS3gNlgrRJN01lXQTZhzxWxWCa6GnB66GXwaapVDZqQTYjicg1:MlH4LSwarx0PXoVWDn26pqgaYjicg1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01c0690c7af95767c6872233acc955e7
Files
-
01c0690c7af95767c6872233acc955e7.exe windows:4 windows x86 arch:x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 204KB - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE