Static task
static1
Behavioral task
behavioral1
Sample
1c61d5c8dfa1313e94dbfe4487cb9502.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1c61d5c8dfa1313e94dbfe4487cb9502.exe
Resource
win10v2004-20231215-en
General
-
Target
1c61d5c8dfa1313e94dbfe4487cb9502
-
Size
48KB
-
MD5
1c61d5c8dfa1313e94dbfe4487cb9502
-
SHA1
ce85370a576bf3c1db34077afa00caf12dd1d7a3
-
SHA256
e275c60eaa69baaf4b55cf433e835a49791090f03a3a32c6f48f358d48c204bd
-
SHA512
28aef19a85dcb9d6d6dac8066e798740f08a49d36ec69f5fb10087d64d6e78cdc9d6414b43829641f8518de43b7eb41b0989776decbafc34dc3b4d9d723ea08f
-
SSDEEP
384:+pJiLg8EDpoUuhGrmli8l5owyeyyZlIBzlXhvo1o:+vMPEtQGoldykGbhvom
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c61d5c8dfa1313e94dbfe4487cb9502
Files
-
1c61d5c8dfa1313e94dbfe4487cb9502.exe windows:4 windows x86 arch:x86
0c3e6896f18c452707959118b435c891
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetCurrentDirectoryA
GetTickCount
SetEvent
DebugBreak
CreateEventA
Sleep
WaitForSingleObject
OpenEventA
CreateProcessA
CloseHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapReAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
GetFileAttributesA
advapi32
OpenServiceA
DeleteService
OpenSCManagerA
CreateServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
ControlService
wsock32
WSAStartup
select
sendto
socket
gethostbyname
closesocket
urlmon
URLDownloadToFileA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ