Static task
static1
Behavioral task
behavioral1
Sample
1caee351e65abeda1afc342d89414ffc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1caee351e65abeda1afc342d89414ffc.exe
Resource
win10v2004-20231215-en
General
-
Target
1caee351e65abeda1afc342d89414ffc
-
Size
46KB
-
MD5
1caee351e65abeda1afc342d89414ffc
-
SHA1
a5e8d652c8137f153577f6eebc7e76e75587b08f
-
SHA256
4079d931d53cdd10678c96a24a611f4e418bfaaf2d5cafc19ad3af74542e6174
-
SHA512
d73b106fab7e9e0a0190fed3e5ff0924071db4d36f982fa6a1d9c5866e53162aa461e0ae556dd23c83332cd5f210563720af76d5b9c392af048552c3f04a68b3
-
SSDEEP
768:0LSy+d+VVYZLxIw/o+RKDc4sfF8Ip9uwbBTnBeQ4Xfl8QSJ:0Gy+d+Vidx/pUDcvfeIp9uwbBTnB2fWj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1caee351e65abeda1afc342d89414ffc
Files
-
1caee351e65abeda1afc342d89414ffc.exe windows:5 windows x86 arch:x86
95c1c0c7be024a33fb652594a678773e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CryptCreateHash
RegDeleteValueA
DuplicateTokenEx
RegQueryValueExA
RegCloseKey
CryptGetHashParam
CryptReleaseContext
RegEnumKeyExA
shlwapi
wvnsprintfA
PathMatchSpecW
SHDeleteKeyA
PathCombineW
StrCmpNIW
wvnsprintfW
PathRemoveFileSpecW
PathFileExistsW
wnsprintfA
StrCmpNIA
StrStrW
PathFindFileNameW
Sections
.hsr Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wbov Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.non Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ