Static task
static1
Behavioral task
behavioral1
Sample
c91e514dc902e149f49da6367773c135.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c91e514dc902e149f49da6367773c135.exe
Resource
win10v2004-20240226-en
General
-
Target
c91e514dc902e149f49da6367773c135
-
Size
317KB
-
MD5
c91e514dc902e149f49da6367773c135
-
SHA1
1f2e146814059bc37612fa48f8f3ce7f69768494
-
SHA256
61b43fc99874a9cd568120945d00d6399c6b53c1e0dbf2be748ba6fea4376033
-
SHA512
b56875cf35ba0e43afb100ee6660b4dd37c78864b4fafc5e57034f01d914dc5cc1fbea8300651d5fc04ca3c8f835c152e81790e1dfd7d999c8a48390a8a8f473
-
SSDEEP
6144:MWKaeC/4nXA13lwjbjHMGcnr6hDLCF1bzzFD5BrOSMInBOwUsD1N:MWanX5Hrlcnr6hDLstzzYSMaBOwUsRN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c91e514dc902e149f49da6367773c135
Files
-
c91e514dc902e149f49da6367773c135.exe windows:4 windows x86 arch:x86
acf9bec250c21209d9f7d1575cf97581
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsolePalette
HeapCreate
FreeConsole
WriteProfileStringA
IsBadCodePtr
RaiseException
GetACP
GetLastError
DeleteAtom
EnterCriticalSection
GlobalFree
VirtualProtect
GlobalAddAtomA
LocalFree
CloseHandle
LoadLibraryExA
GlobalUnlock
GlobalAddAtomA
GetStdHandle
lstrcpyA
LoadResource
user32
GetClassInfoExA
BeginPaint
GetForegroundWindow
GetFocus
ReleaseDC
IsIconic
GetClassNameA
GetWindowTextA
ValidateRect
GetParent
GetDC
CloseWindow
DrawEdge
GetActiveWindow
GetWindow
ShowWindow
EndPaint
AlignRects
GetWindowTextLengthA
mprapi
MprAdminUserOpen
MprAdminUserClose
MprAdminUserWrite
MprAdminUserRead
MprAdminUserGetInfo
linkinfo
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ