Static task
static1
Behavioral task
behavioral1
Sample
26781b583ba84dfe092709307855c713.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
26781b583ba84dfe092709307855c713.exe
Resource
win10v2004-20231215-en
General
-
Target
26781b583ba84dfe092709307855c713
-
Size
91KB
-
MD5
26781b583ba84dfe092709307855c713
-
SHA1
54a69ae7d3460f64ff66f02339f44d0a22c88725
-
SHA256
75f50b7a0b65b5c3d7b2ecadcf3684ec292ba44911dc86376624e70ef55e44e2
-
SHA512
bc0263fab998f662c2703b943a2d2a485886f5a53ca03c427a707dca2fb63fdcaa67893e8a382220dc2eebf6ecf906f85f3f16a2d38e8a2f42f67fe962edd638
-
SSDEEP
1536:jKGD/4dMDrDYETvcEoImxIW2N63FMBCWPvKlpYv00NEKFkxlxjNf2SQ19uKq:++/4CvDHwEMxF2NoivKlpYvv+KFkRNfL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26781b583ba84dfe092709307855c713
Files
-
26781b583ba84dfe092709307855c713.exe windows:4 windows x86 arch:x86
1367adda6788f84a6c2663dbdd0a4701
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
_CxxThrowException
shfolder
SHGetFolderPathA
ole32
CoInitializeEx
user32
GetWindowTextA
gdi32
DeleteObject
shell32
Shell_NotifyIconA
urlmon
URLDownloadToFileA
wininet
InternetOpenA
version
GetFileVersionInfoA
oleaut32
VariantInit
advapi32
CryptDeriveKey
Sections
.text Size: 82KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE