Static task
static1
Behavioral task
behavioral1
Sample
1cce6183d78390c59c4caaff986561fb.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1cce6183d78390c59c4caaff986561fb.exe
Resource
win10v2004-20231215-en
General
-
Target
1cce6183d78390c59c4caaff986561fb
-
Size
706KB
-
MD5
1cce6183d78390c59c4caaff986561fb
-
SHA1
a796becf42cd2dd5581d648981df506ae97885ef
-
SHA256
eca673d632c0fb8771b9808116ad84bf2183a50dca3d171c21f793e1d73a2eea
-
SHA512
fd60900eb440e6cea4bdb7acae379e95de127aa1b2673b9e0dc574fc598454af3bb8fb656d60a25d99113c01a45a5dccbf61faf27695f9fc1aecf219211b981c
-
SSDEEP
12288:6zLrrm2/ZUI2nguKQ91zdlq5Lgik7e6bVwJduTG1SjhcRuscbcBZR+eYE0EX9Co:6LrrmeUI25KQ91zdlq5LgVVwzuT/jhE9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1cce6183d78390c59c4caaff986561fb
Files
-
1cce6183d78390c59c4caaff986561fb.exe windows:4 windows x86 arch:x86
64be37ca12a477a5cda1049dc3f2b14b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shfolder
SHGetFolderPathA
wsock32
gethostbyaddr
WSAStartup
WSACleanup
wininet
InternetCanonicalizeUrlA
InternetGetCookieA
InternetReadFile
HttpAddRequestHeadersA
InternetCloseHandle
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
InternetOpenA
InternetOpenUrlA
InternetSetCookieA
iphlpapi
GetIpAddrTable
netapi32
Netbios
kernel32
HeapAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetLocaleInfoW
GetOEMCP
GetTickCount
QueryPerformanceCounter
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetSystemTime
GetLastError
GetLocaleInfoA
GetVersionExA
CloseHandle
GetFileSize
CreateFileA
ReleaseMutex
WaitForSingleObject
SetFileAttributesA
MoveFileA
DeleteFileA
GetVolumeInformationA
CopyFileA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateMutexA
InterlockedExchange
GetACP
Sleep
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GetCurrentThreadId
InitializeCriticalSection
DeleteCriticalSection
RaiseException
CreateThread
ExitProcess
GetModuleHandleA
SetEvent
SetWaitableTimer
CreateWaitableTimerA
CreateEventA
GetTempPathA
HeapFree
OpenMutexA
GetCurrentProcessId
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
TerminateProcess
FindClose
FindNextFileA
FindFirstFileA
WriteFile
SizeofResource
FreeResource
LockResource
LoadResource
FindResourceA
ReadFile
FindCloseChangeNotification
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationA
CreateDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
HeapSize
SetFilePointer
IsBadWritePtr
HeapReAlloc
VirtualFree
RtlUnwind
HeapCreate
HeapDestroy
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
TlsGetValue
GetTimeFormatA
GetDateFormatA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
GetCurrentProcess
SetUnhandledExceptionFilter
GetFullPathNameA
LocalFree
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCPInfo
LCMapStringW
LCMapStringA
GetCommandLineA
lstrlenA
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
GetStartupInfoA
user32
GetActiveWindow
GetKeyboardLayoutNameA
ActivateKeyboardLayout
GetKeyboardLayout
GetKeyboardLayoutList
GetForegroundWindow
SetActiveWindow
SetWindowPos
DefWindowProcA
SetPropA
LoadStringA
GetPropA
GetMessageA
CreateWindowExA
SetWindowLongA
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
GetWindowThreadProcessId
AttachThreadInput
GetFocus
RemovePropA
FindWindowExA
GetDlgItem
advapi32
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
shell32
ShellExecuteA
ole32
CoCreateInstance
CreateStreamOnHGlobal
CoMarshalInterface
CoUnmarshalInterface
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
OleRun
oleaut32
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysStringLen
SysFreeString
VariantCopy
VariantInit
VariantClear
GetErrorInfo
Sections
.text Size: 461KB - Virtual size: 461KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ