Static task
static1
Behavioral task
behavioral1
Sample
14ece6685573bf485f1aaaf09585fac1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14ece6685573bf485f1aaaf09585fac1.exe
Resource
win10v2004-20231215-en
General
-
Target
14ece6685573bf485f1aaaf09585fac1
-
Size
146KB
-
MD5
14ece6685573bf485f1aaaf09585fac1
-
SHA1
fb9fec7eef9e9ffb49afda5697f0dd02ff667253
-
SHA256
c223f190afea458e7be009eeb32c1dbd031c8952830ee56961bb7369ebee1127
-
SHA512
405715c30296b578e775657a71b901076913b8aa40692b36b2a57d4568fbad0cfb5e0611b1ec833fc648413b5f0ecec64267beebab25dc78e5e8708757ed6499
-
SSDEEP
3072:y+Iw4R8f/TeACjVwh0OD6WtaGC9SkeAiip8lG5ccVPByXFeLloXI4iuphVuu:yE4R8fyAuVROuUa0nAiip8k5cOPByuly
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14ece6685573bf485f1aaaf09585fac1
Files
-
14ece6685573bf485f1aaaf09585fac1.exe windows:4 windows x86 arch:x86
d2bbddb8c010773f04c2d9dd29668462
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
Sections
CODE Size: 132KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE