Static task
static1
Behavioral task
behavioral1
Sample
1d7ebcc2725123925eb80161a36dda8f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d7ebcc2725123925eb80161a36dda8f.exe
Resource
win10v2004-20231215-en
General
-
Target
1d7ebcc2725123925eb80161a36dda8f
-
Size
182KB
-
MD5
1d7ebcc2725123925eb80161a36dda8f
-
SHA1
554835ace26bc0ce8975758683ab9959d9ba3df5
-
SHA256
40d650ccb12ff8c856724f5550b7e48f392d52cb9ec8e698f5136f09af6fe096
-
SHA512
f10a969a2123b3563f09b0a529bafa4d640e3b1bdd6a271ea257b4a2e1cbeaa855d02d902e0cd561c6c915d79a4152c7b525c3e2ad90686eaaf1151fb2ceca82
-
SSDEEP
3072:w2yeNSwbudr2TzoP+TolFa/ngKfdTpL9zNt7ry0SlCY7IYegP3BYlSVCtarmUUJ:w2ycbmrZlU/n5lhjrmC07Pm4C4r+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d7ebcc2725123925eb80161a36dda8f
Files
-
1d7ebcc2725123925eb80161a36dda8f.exe windows:4 windows x86 arch:x86
61c7e6bbfc8f5bf6b8364a60de18883c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateProcess
FlushInstructionCache
HeapDestroy
ExitProcess
RtlUnwind
SetUnhandledExceptionFilter
IsBadWritePtr
GetCommandLineA
ExitProcess
VirtualAlloc
SetLastError
HeapReAlloc
SetLocaleInfoW
VirtualFree
VirtualQuery
GetProcAddress
HeapCreate
TlsAlloc
GetSystemInfo
VirtualProtect
rpcrt4
I_RpcFreeBuffer
UuidCreate
user32
DestroyWindow
ReleaseDC
GetDialogBaseUnits
SetDlgItemTextA
GetDlgItemTextA
ShowWindow
MoveWindow
IsDlgButtonChecked
SendMessageA
GetDC
WinHelpA
SetWindowLongA
IsWindow
GetDlgItem
UnregisterClassA
IsDialogMessageA
CreateDialogParamA
EnableWindow
CheckDlgButton
CharNextA
ole32
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoTaskMemRealloc
shlwapi
PathFindExtensionA
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ