Static task
static1
Behavioral task
behavioral1
Sample
1b9e07c4ad51515c817a20e1eefa592a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b9e07c4ad51515c817a20e1eefa592a.exe
Resource
win10v2004-20231215-en
General
-
Target
1b9e07c4ad51515c817a20e1eefa592a
-
Size
1.0MB
-
MD5
1b9e07c4ad51515c817a20e1eefa592a
-
SHA1
75dfb24cd0467ddc5ea6211307931f1affbc2ec7
-
SHA256
c1bc5eeda32f56653f206f10bdcd04d30d171f9a85252660f788de2c49bb39fe
-
SHA512
1603f7c8c939431069db4089f86877c2afde10792c7655f0741e1042ddda6c5841573aeb630fd8bbd3827d0ec6d0b2e89d0e7c1b2d6938bb45e5be7451d3762a
-
SSDEEP
24576:JuUl8B5nw8yZS12kn6Z5v3NPuiFgsYRXdQn:IRB5nm0nK5vVLFgsodY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b9e07c4ad51515c817a20e1eefa592a
Files
-
1b9e07c4ad51515c817a20e1eefa592a.exe windows:4 windows x86 arch:x86
e85fbd3f02ccd67504a40716458bda81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetVersion
GetModuleHandleA
GlobalAlloc
GetLastError
Sleep
CreateEventA
lstrcatA
lstrcpyA
FreeLibrary
GetTickCount
GlobalFree
lstrlenA
gdi32
GetTextExtentPoint32A
GetStockObject
LineTo
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleDC
MoveToEx
SetPixel
PatBlt
SelectObject
GetTextColor
BitBlt
SetBkMode
GetObjectA
user32
DestroyWindow
SetWindowTextA
EndPaint
GetSysColor
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ