Hp0tqhZLNCy3nZ@16
Static task
static1
Behavioral task
behavioral1
Sample
1b1038dc8e49b8d38abf9c718795249a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1b1038dc8e49b8d38abf9c718795249a.exe
Resource
win10v2004-20231215-en
General
-
Target
1b1038dc8e49b8d38abf9c718795249a
-
Size
73KB
-
MD5
1b1038dc8e49b8d38abf9c718795249a
-
SHA1
49eabbf0d980235a51b176159eecdb2731d0522c
-
SHA256
2703f9a507fbbd35b6d1c3f96d29742eae81655fb5084f7d5a8a701711dcffa9
-
SHA512
fd0d12a51a3dc742edf1bc3098ccd2ba8a90189a922f550d96bff5bb9f2075ee7219e5a35dd6d5700e96a6e21a2c6a10c0caacc33bd1c1681047e16288413cbb
-
SSDEEP
1536:aWXpudMusfectyejpldXsOoYIequ7dJ60Qxk43d7qc:a6pIyecnR1I67bgZ5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b1038dc8e49b8d38abf9c718795249a
Files
-
1b1038dc8e49b8d38abf9c718795249a.exe windows:4 windows x86 arch:x86
9c38c37c2b81f255e292275682f9aba9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathA
SHFileOperationA
Shell_NotifyIconW
user32
GetKeyboardType
DrawMenuBar
GetMenuItemCount
LoadIconA
GetLastActivePopup
GetMenu
CreateMenu
IsCharLowerA
gdi32
RestoreDC
GetBkColor
GetClipBox
kernel32
VirtualAllocEx
lstrcmpA
GetCurrentThreadId
ExitProcess
lstrcatA
GetLastError
HeapDestroy
Exports
Exports
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ