Static task
static1
Behavioral task
behavioral1
Sample
1ad4ecaec2f38acc9ca7b25e85a2b1ab.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1ad4ecaec2f38acc9ca7b25e85a2b1ab.exe
Resource
win10v2004-20231222-en
General
-
Target
1ad4ecaec2f38acc9ca7b25e85a2b1ab
-
Size
92KB
-
MD5
1ad4ecaec2f38acc9ca7b25e85a2b1ab
-
SHA1
8e06789df2d3348802415744655bc3bbc8da9ba3
-
SHA256
424391b92909013f693e6db281c523a3c490efada338180d688253edb4b60355
-
SHA512
45ab6ff4cb48e1a69200d5e0f6290192a5c74943c336dd4f7a96b561b5aaaebf369abe96e0dd921e008390d68921c8ca2b6aac1a37aa5576028cda77d46039b1
-
SSDEEP
1536:ENLekEqYM2LiHdzw7m1cxfsq7YkCiHU+A+87VW8vi33n75OX+l6VNjwXpHVw6gOT:mTEqa0wK1xibA+8pW8vinn75Oai+5H6W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ad4ecaec2f38acc9ca7b25e85a2b1ab
Files
-
1ad4ecaec2f38acc9ca7b25e85a2b1ab.exe windows:4 windows x86 arch:x86
c91f3f678cde4277b32110adee176431
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DrawStateA
DestroyCursor
DefDlgProcA
CreatePopupMenu
CreateDialogIndirectParamA
CreateAcceleratorTableA
CopyRect
CopyImage
CharToOemBuffA
kernel32
GetPrivateProfileStringA
lstrlenA
lstrcpyA
lstrcmpiA
TlsSetValue
TlsGetValue
TlsFree
SetEndOfFile
SetCurrentDirectoryA
RtlUnwind
EnterCriticalSection
EnumResourceTypesA
ExitProcess
GetDateFormatA
GetFileSize
GetTimeFormatA
LoadResource
MapViewOfFile
ReadFile
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE