Static task
static1
Behavioral task
behavioral1
Sample
0014ff1efc0df14345194833634c2825.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0014ff1efc0df14345194833634c2825.exe
Resource
win10v2004-20231215-en
General
-
Target
0014ff1efc0df14345194833634c2825
-
Size
9KB
-
MD5
0014ff1efc0df14345194833634c2825
-
SHA1
d67d911aa2c197255f009ce64be6d7976316e378
-
SHA256
9f0b58f2c042f75fccf94aa88d3de8a3a4018f742910bf07e4cd506ae08c247c
-
SHA512
26c9e1163b41c58c41f5c7668f62854029848acc123f0bb298bc5ae99f30e9e5f048e8d5117d905293926f906d24964eb0bcc50e71c60d998f1a912a33fcd5ff
-
SSDEEP
96:GC2mf4hKqlJWjfBbisFcqBdK7777775eWKepysYWec+Pro+moN1Z/RyjSsZbHckw:G9miJmBbis6Kb0bI1tFsmktMjsNP9y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0014ff1efc0df14345194833634c2825
Files
-
0014ff1efc0df14345194833634c2825.exe windows:1 windows x86 arch:x86
b4e3f70b6ea4a4966706bc977170db22
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
FindNextUrlCacheEntryA
GetUrlCacheHeaderData
FindNextUrlCacheEntryA
CreateUrlCacheContainerW
shell32
SHBindToParent
SHFormatDrive
DragQueryFileW
SHGetDataFromIDListA
SHGetPathFromIDListW
StrStrA
ExtractIconA
msvcrt
__iscsymf
__argc
__toascii
__RTCastToVoid
__unDName
__badioinfo
__crtLCMapStringA
__pioinfo
__unDNameEx
Sections
����t Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE