Static task
static1
Behavioral task
behavioral1
Sample
14ee29d05a2f78f4c2b8a8e9be0e4e45.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
14ee29d05a2f78f4c2b8a8e9be0e4e45.exe
Resource
win10v2004-20231215-en
General
-
Target
14ee29d05a2f78f4c2b8a8e9be0e4e45
-
Size
19KB
-
MD5
14ee29d05a2f78f4c2b8a8e9be0e4e45
-
SHA1
5a4461555d89ee97168587bd8cf693669254b8de
-
SHA256
37d87662847e8cf87e7963fb366f89bc5af0933e8bdd7b0388d6a6f46e7cf3e2
-
SHA512
86ea801e25ef82f0ce2a7b08098ed507f89ad8e7ad53a479a26b113083a2f6e2078c82e6c5d66e76e03f9bb983a217c4dbe0c2534343608c93df5a879de1aff1
-
SSDEEP
384:bbq0vTDHza0XXAhDH9f6kDeLp2E3OwkXmF1bzwsiDV:/que0HU9yrsvXAbzwsu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14ee29d05a2f78f4c2b8a8e9be0e4e45
Files
-
14ee29d05a2f78f4c2b8a8e9be0e4e45.exe windows:4 windows x86 arch:x86
33474628c7b7faf51e9b6fcb80bfe0ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHQueryRecycleBinW
ExtractIconW
CheckEscapesW
SHLoadInProc
SHFileOperationW
SheFullPathW
user32
CreateDialogParamW
DdeClientTransaction
DdeInitializeW
DdeUninitialize
GetClassLongW
kernel32
GetModuleHandleW
GetStringTypeW
GetThreadLocale
IsBadCodePtr
IsBadReadPtr
LocalHandle
gdi32
Chord
DPtoLP
CreatePen
EnumICMProfilesW
ExcludeClipRect
BitBlt
Arc
Sections
.text Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE