Static task
static1
Behavioral task
behavioral1
Sample
c1bf994cb50a8283b66eada981aa5462.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c1bf994cb50a8283b66eada981aa5462.exe
Resource
win10v2004-20240226-en
General
-
Target
c1bf994cb50a8283b66eada981aa5462
-
Size
1.5MB
-
MD5
c1bf994cb50a8283b66eada981aa5462
-
SHA1
c3b352fb272769225fba6cbd53f804a5a3b7886a
-
SHA256
40c99d66ea9d746bd00234306c3fb1ef9436c0447f8daf74f4cdb0cec51eb560
-
SHA512
6468c135fe720862ff89b70537f06dc89dd655d93af052850a857a0f14e5515a5c8546cad9a51e70035fd8f502419ce8d607c1a65bca5761561618488f111491
-
SSDEEP
24576:RYs5P9dFIcM/K9KDDWreqOSVXbHW+CNEpsCvD+Cth1KFuFoDYI3QW74rPc7KMHnl:RV5P9ocpSWr3vHW+CNOsMKOh1kuFo8Ip
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c1bf994cb50a8283b66eada981aa5462
Files
-
c1bf994cb50a8283b66eada981aa5462.exe windows:5 windows x86 arch:x86
32b19a71e6d594fc5171400e0a0d37dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
LoadLibraryA
user32
LoadStringW
shell32
SHGetPathFromIDListW
ole32
CoInitialize
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
advapi32
RegQueryValueExA
Sections
indtynd Size: 1.5MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tyodtyod Size: 32B - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tyo Size: 16B - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE