Static task
static1
Behavioral task
behavioral1
Sample
1ff5dac3b82c52b670de01ee58a2e987.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ff5dac3b82c52b670de01ee58a2e987.exe
Resource
win10v2004-20231215-en
General
-
Target
1ff5dac3b82c52b670de01ee58a2e987
-
Size
474KB
-
MD5
1ff5dac3b82c52b670de01ee58a2e987
-
SHA1
f09ddfb04e83d8bdb201d6e29e36d111149d2f69
-
SHA256
5f305a68f115799f9160404bfc57b406f933f6c32904d7605a919cc158a3a688
-
SHA512
e3652c793cbebd6279003c56e7bb6c2ac0b90acd64a5e9320bc51703f03fd1bb623ca84db96dc58a07f801f2cbf1abc1cbd14cf0c446ec35a22c2a143fe22ff5
-
SSDEEP
6144:P+fAz16PHyf+TyiYQvd1E6dqi4py58FERo+ZwD6GNIjajKNcpwErIU+nfwETqeOs:P+Iz16fjX1Ey1Voja8lzUU+4ER
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ff5dac3b82c52b670de01ee58a2e987
Files
-
1ff5dac3b82c52b670de01ee58a2e987.exe windows:4 windows x86 arch:x86
65b6862e9898b195f4ef7a1685fd82dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
memset
comctl32
InitCommonControls
user32
MessageBoxA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
. Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE