Static task
static1
Behavioral task
behavioral1
Sample
1203c7fd8e62fdc7cddf1a4b0edee299.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1203c7fd8e62fdc7cddf1a4b0edee299.exe
Resource
win10v2004-20231215-en
General
-
Target
1203c7fd8e62fdc7cddf1a4b0edee299
-
Size
12.1MB
-
MD5
1203c7fd8e62fdc7cddf1a4b0edee299
-
SHA1
55a1e9c97bd107229010e8e94c2c295fe6a77266
-
SHA256
586631289df8071fe98d01ca6217540a18d59712177c7e708e6eaef955ff400e
-
SHA512
ec928a280698cb0c2fa1aeb39a3b6c8c1e0a822c8c3db72159f475efa7530666f6634e2279a5401a7e2cb7aaab03e732b7a98f286e416cbfb2647ae3441b85d5
-
SSDEEP
98304:B1PTJxjRXzJlwyxGbYXrwVegkUbYZfgs0QlxJjeBiqVmrgq8no:B1LdzJlwyxGarY1kU64sAzmMno
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1203c7fd8e62fdc7cddf1a4b0edee299
Files
-
1203c7fd8e62fdc7cddf1a4b0edee299.exe windows:4 windows x86 arch:x86
65b6862e9898b195f4ef7a1685fd82dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
memset
comctl32
InitCommonControls
user32
MessageBoxA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
. Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE