?CreateHelpDialog@@YGHHHHHHHH#O
Static task
static1
Behavioral task
behavioral1
Sample
1c6b623daf12de710f306fda211c72cc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c6b623daf12de710f306fda211c72cc.exe
Resource
win10v2004-20231215-en
General
-
Target
1c6b623daf12de710f306fda211c72cc
-
Size
141KB
-
MD5
1c6b623daf12de710f306fda211c72cc
-
SHA1
660276655261a934484f8b6b4caab32376033b61
-
SHA256
567e465cf50cdd4f8f1f058301253e980593a2696fe8cba2ec895e67e559a970
-
SHA512
be7db384142cb3dc8a8ba796aa3583e49c16e299b1dd0c8c4ce08f138531f858ef29e794c622533d878717747320fd9c65fb6893712f52c95aaf717a0b68e0b1
-
SSDEEP
3072:69loZXjF9vXqOV1eyZgpuifeO/AB7mrNRGL/Zd1UsOC8U3zTKv5Gg/jVBV:nZXvXqyt6puifeO/cIGLlB3PuD7V7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c6b623daf12de710f306fda211c72cc
Files
-
1c6b623daf12de710f306fda211c72cc.exe windows:5 windows x86 arch:x86
4f1f08ad147d646ff7b7eb6cb712f179
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCompactPathExW
user32
wsprintfA
kernel32
lstrlenW
CompareStringA
lstrlenA
LoadLibraryA
Exports
Exports
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 145KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE