Static task
static1
Behavioral task
behavioral1
Sample
58aca18d6f1897206e36ae21a542b765.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
58aca18d6f1897206e36ae21a542b765.exe
Resource
win10v2004-20231215-en
General
-
Target
58aca18d6f1897206e36ae21a542b765
-
Size
995KB
-
MD5
58aca18d6f1897206e36ae21a542b765
-
SHA1
c53967795aef641da49caf29c485264c8b4ff050
-
SHA256
382464de01273f135c85a15ce517440e0c882528957e43b1c69ba2ea146a53f7
-
SHA512
0ab879a92715f2ff47073e44e475f641c49cfc5db7a5c58e0c022a4ce2513ff529268dc6d02cde77556c2d7aec639ffeb7a2290288a3aae708764f645883b728
-
SSDEEP
24576:b/0wlANZpZmUJei4KDZb+qhwO19/3BM57A7Wm05w/6a4wzt08:tmNZO7gFbhwaBU7mWm058J08
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 58aca18d6f1897206e36ae21a542b765
Files
-
58aca18d6f1897206e36ae21a542b765.exe windows:4 windows
ca8a361dedf71e76246b9a7c3da05438
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
urlmon
UrlMkGetSessionOption
shell32
SHGetSpecialFolderLocation
wsock32
WSACleanup
ntdll
NtQueryInformationProcess
rpcrt4
UuidCreateSequential
Sections
CODE Size: 966KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE