Static task
static1
Behavioral task
behavioral1
Sample
1ed1fd7df35cbce7eaccff4810a84501.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1ed1fd7df35cbce7eaccff4810a84501.exe
Resource
win10v2004-20231215-en
General
-
Target
1ed1fd7df35cbce7eaccff4810a84501
-
Size
11KB
-
MD5
1ed1fd7df35cbce7eaccff4810a84501
-
SHA1
87384376d86a7d23b10664ab390badcecdcf84cb
-
SHA256
a53550f358dcae1b639bbb6995b471d085b15be0a42fba546e1fb2f969583f24
-
SHA512
a421818cbd50dc80f7c29ec85d7722d439e3df1aba9f4267cf4c2b99122869970a5c7a876d2a06d3ad4c72c80d8808d0e8a1432ece7997cead8367e2f7129a70
-
SSDEEP
192:wdWI4Hm+gmZ2eX0F+7PsEdMGpC13Vmdrd364uLbOPluNlimEc8OMkA8zVAGehCju:5LGDmZ2eX0IoEdFQ18dr/TmEDWAYAsju
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ed1fd7df35cbce7eaccff4810a84501
Files
-
1ed1fd7df35cbce7eaccff4810a84501.exe windows:1 windows x86 arch:x86
0ae741b125161410dad8e131a17c3b57
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ExtCreateRegion
ExtFloodFill
FrameRgn
GdiGetDC
user32
CloseClipboard
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA
msvcrt
wscanf
wprintf
wctomb
wcsxfrm
wcstoul
wcstombs
wsock32
WSASetLastError
WSAAsyncGetProtoByNumber
getservbyname
getsockopt
ntohs
rresvport
Sections
.text Size: 5KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE