Static task
static1
Behavioral task
behavioral1
Sample
1ee8e6419e2f051376704537cc2f6089.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1ee8e6419e2f051376704537cc2f6089.exe
Resource
win10v2004-20231222-en
General
-
Target
1ee8e6419e2f051376704537cc2f6089
-
Size
48KB
-
MD5
1ee8e6419e2f051376704537cc2f6089
-
SHA1
16f4f634929ad72a973597a78b0f8e43c9499fa8
-
SHA256
c19e9dfb5ded091cc18ea079787d24f07d89ee937aa0f26c669d36cfff533bb5
-
SHA512
8058e5458c3727de574d01e26c552fb580096fa5473522c70535a0dfaf6c213566c84209105f4735402e98cdba377351289c3f0df5f3930e31bc7b3115fdc6a1
-
SSDEEP
384:sBlcVYiJZ9996vHg9gAS3SIkF1WvhCS3ndOM0xCD30yi4nnbYMZUja9YlHMsMMzr:glIv9iAWAS3mCoOA00ud2jaCHMs/z5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ee8e6419e2f051376704537cc2f6089
Files
-
1ee8e6419e2f051376704537cc2f6089.exe windows:4 windows x86 arch:x86
329cab30f025b636ab724a2be6a2a6bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
CreateProcessA
GetSystemDirectoryA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
LoadLibraryA
GetProcAddress
WriteFile
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
SetFilePointer
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
CloseHandle
lstrlenA
GetComputerNameA
HeapReAlloc
GetTickCount
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
CreateDirectoryA
GetEnvironmentStrings
GetLastError
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
user32
CreateWindowExA
wsprintfA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
EndDialog
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
DrawTextA
GetMessageA
EndPaint
ShowWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
PostQuitMessage
advapi32
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
wininet
InternetReadFile
InternetQueryDataAvailable
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
netapi32
Netbios
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE