Static task
static1
Behavioral task
behavioral1
Sample
1ecbe6f11b6a8655aea1e88f2195cf85.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ecbe6f11b6a8655aea1e88f2195cf85.exe
Resource
win10v2004-20231222-en
General
-
Target
1ecbe6f11b6a8655aea1e88f2195cf85
-
Size
243KB
-
MD5
1ecbe6f11b6a8655aea1e88f2195cf85
-
SHA1
60d27316f0b50875cbd4ea7b2112e9efacb4a2d9
-
SHA256
f78048d35fa800d25bcc400edf3cf31759f0896b7a334d4d627af84538b721b8
-
SHA512
3e5327504769a051069255815d6bb8641df33fbeab1b26d311fcf45daf660d96faad1ec7eee8053bd25076f6e2e839c6cd6b57a54f9711959699168e01d7166e
-
SSDEEP
6144:jzSZrwa9sEuHi7N1aqoFnzmUk8bi2jcb9WqA7GHS:jzSSaaA7rajzmUkwXr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ecbe6f11b6a8655aea1e88f2195cf85
Files
-
1ecbe6f11b6a8655aea1e88f2195cf85.exe windows:4 windows x86 arch:x86
215e18b05f03d18a197f7a560f4dd28a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
GetNamedPipeInfo
GetExitCodeThread
CreateFileA
WriteFile
GetModuleFileNameA
GetModuleHandleA
GetEnvironmentVariableA
user32
PostMessageA
Sections
lMJsdcws Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
cGcaOdXz Size: 1024B - Virtual size: 642B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NhnwTdty Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
KtadykdY Size: 211KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE