Static task
static1
Behavioral task
behavioral1
Sample
1b6f58ab2f22aa91575b6a80a28dd335.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b6f58ab2f22aa91575b6a80a28dd335.exe
Resource
win10v2004-20231215-en
General
-
Target
1b6f58ab2f22aa91575b6a80a28dd335
-
Size
49KB
-
MD5
1b6f58ab2f22aa91575b6a80a28dd335
-
SHA1
db0af8c15320740fdca6c1394c6bbd2cd9ecfefd
-
SHA256
0db5b915b764a0e06b43121d88ac51254c0d4bc134fbb3ff2a41fe98b05bdf57
-
SHA512
4190d18d859abef93fb2d10cc1454f5ffb796e22da737530547054d841053345e37b5ebdc3a6dc7561c7e46c96cd1af1f879c2129074ddc0a9f38132591c206d
-
SSDEEP
768:KSwiDGn3Dor4Rh2rMGyqreETOXr79kKOIYe5MD9nFyUBGiSAhRH8:KacUr4Rh2AGyqreEKTru9nFyjiS4a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b6f58ab2f22aa91575b6a80a28dd335
Files
-
1b6f58ab2f22aa91575b6a80a28dd335.exe windows:4 windows x86 arch:x86
a1be4da85c1d1c7afc465894799a5701
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
ExitProcess
IsSystemResumeAutomatic
VerLanguageNameW
WritePrivateProfileStringW
advapi32
CreatePrivateObjectSecurity
CryptGetDefaultProviderA
GetKernelObjectSecurity
GetSecurityDescriptorDacl
LogonUserA
LookupAccountNameA
ReadEventLogA
user32
CreateIconFromResourceEx
DrawAnimatedRects
GetDesktopWindow
GetTopWindow
LoadBitmapW
LoadImageA
OpenDesktopW
RegisterTasklist
SetWindowLongA
WaitMessage
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE