Static task
static1
Behavioral task
behavioral1
Sample
1d3e5646a1f9a79515d5ca3a452aaa50.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d3e5646a1f9a79515d5ca3a452aaa50.exe
Resource
win10v2004-20231215-en
General
-
Target
1d3e5646a1f9a79515d5ca3a452aaa50
-
Size
46KB
-
MD5
1d3e5646a1f9a79515d5ca3a452aaa50
-
SHA1
bbdacd3af1f0f48de5451957522d2065f1cd63f8
-
SHA256
8e3fa1b10d2f90159a173c25f3cdd81167ac0db4c0e6921b97d1d9019d92b5f3
-
SHA512
75e43dbd0c4fa43baf5dfc7cd8f9f5c4d0b2ca9a3ab6ea901db982fd845d96401eddc5de9cd25711a5fb2fb4c2db72b3f3ae0d7cb09b53fb4234ae1a80989653
-
SSDEEP
768:QN5Jt+liJVexWVbyVPsq/TaBuC/Bp8DSkn6CkC5HVYPC:kZ+c9VysqbWuZDSKDHyP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d3e5646a1f9a79515d5ca3a452aaa50
Files
-
1d3e5646a1f9a79515d5ca3a452aaa50.exe windows:5 windows x86 arch:x86
62ac18960fd7232e1ee90ef410fcda48
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA
user32
EndPaint
EndMenu
EndDialog
EndDeferWindowPos
EnumChildWindows
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
DialogBoxParamW
CreateDialogParamW
EnableWindow
advapi32
RegOpenKeyA
RegOpenKeyW
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 486B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ