Static task
static1
Behavioral task
behavioral1
Sample
c1e6171c26b39774b9f5d3e3b2d016081509fd7f5aab4714564a28f36d3d7ac3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c1e6171c26b39774b9f5d3e3b2d016081509fd7f5aab4714564a28f36d3d7ac3.exe
Resource
win10v2004-20231215-en
General
-
Target
c1e6171c26b39774b9f5d3e3b2d016081509fd7f5aab4714564a28f36d3d7ac3
-
Size
1008KB
-
MD5
15b34e6b5cadf988b79f8344f61301c4
-
SHA1
12ee1998b844395f200d67bceb3307dc2cf235c4
-
SHA256
c1e6171c26b39774b9f5d3e3b2d016081509fd7f5aab4714564a28f36d3d7ac3
-
SHA512
cafbf8a619b5f021e6810495cab47ac9c15f78ebff5b6326b5ce9a4dd1703c673ad408ea0fe65c9ac68eea4c23ac8c38a9d9d546f92a047415727079453758c7
-
SSDEEP
24576:YI07FAU3b/HmsTa3ZXPv6RK/WyfIKTPdknXp0kH1YpU2hs+0hfmelC5D+1L:imyBTapfv6Y3fVdKXp0/hs+meela+1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1e6171c26b39774b9f5d3e3b2d016081509fd7f5aab4714564a28f36d3d7ac3
Files
-
c1e6171c26b39774b9f5d3e3b2d016081509fd7f5aab4714564a28f36d3d7ac3.exe windows:4 windows x86 arch:x86
02447c5014a95fc26262ac91358c6411
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
RegisterClassA
gdi32
CreateDIBitmap
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
recvfrom
comdlg32
GetFileTitleA
Sections
.text Size: 1000KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE