Static task
static1
Behavioral task
behavioral1
Sample
1fdb7fa6fa0dbc05c5fce42b33d45296.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1fdb7fa6fa0dbc05c5fce42b33d45296.exe
Resource
win10v2004-20231215-en
General
-
Target
1fdb7fa6fa0dbc05c5fce42b33d45296
-
Size
299KB
-
MD5
1fdb7fa6fa0dbc05c5fce42b33d45296
-
SHA1
a8f0a10eb4dcd9e0bf72643870a04da03bd5ddb9
-
SHA256
8171606e6135a2a66f38fa4829ebd48be9f5fa95776629b2c73519be6232fcd6
-
SHA512
6646229ba0b8e25f6d27486fd312fb398975df85550d692cbcfa0b5fb0412b6f66de316bf1d6b620d6274850b3372f750f5cdbc032bb93a55fca09effbfaef5b
-
SSDEEP
6144:FQ93T5ni/kxXNmRzrPmAJj6+4kMHgmNvzcVPf0MT78cK97aijCk:mpXwRzrPmAJj/VF+zcxf0MX8cKVauCk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1fdb7fa6fa0dbc05c5fce42b33d45296
Files
-
1fdb7fa6fa0dbc05c5fce42b33d45296.exe windows:1 windows x86 arch:x86
ce46bb7339bc9c6cafd4796970eab2d1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareFileTime
GetCommandLineA
GetFileSize
GetLastError
GetProcAddress
GetProcessHeap
GetVersion
LoadLibraryA
SearchPathA
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA
gdi32
CreateBrushIndirect
CreateFontIndirectA
DeleteObject
GetDeviceCaps
SetTextColor
advapi32
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegFlushKey
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyA
RegQueryInfoKeyA
RegQueryValueA
RegQueryValueExA
user32
AppendMenuA
EndDialog
EqualRect
FindWindowExA
GetMenu
GetMessagePos
InvalidateRect
IsCharUpperA
LoadCursorA
PostQuitMessage
ScreenToClient
SetCaretPos
TrackPopupMenuEx
Sections
.data Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspr Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ