Static task
static1
Behavioral task
behavioral1
Sample
d918c2808a96f42a01df02521c5d2501d069fdfe1a1e0dcc53182a0f20fb8131.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d918c2808a96f42a01df02521c5d2501d069fdfe1a1e0dcc53182a0f20fb8131.exe
Resource
win10v2004-20240412-en
General
-
Target
d918c2808a96f42a01df02521c5d2501d069fdfe1a1e0dcc53182a0f20fb8131
-
Size
1.2MB
-
MD5
b254dc7cdef6f1325e53f9e912932d25
-
SHA1
0dc2510a03aa3d620b06eb4afa63743df4422f1c
-
SHA256
d918c2808a96f42a01df02521c5d2501d069fdfe1a1e0dcc53182a0f20fb8131
-
SHA512
3f4247809a7cf1ab5b53c16ed54fe9a463aee2f28f15dace646012afa18ff7b14cd3ee545974964b4ef3b3737855c874b74ad0f331e3e6cd1461457e366f7a3c
-
SSDEEP
24576:RjLUCZaHaCramTIRC4lyMXeTl2i1GUF/6aqx6XCRD1cREG6l:hserC4ZeocGUVqpS6l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d918c2808a96f42a01df02521c5d2501d069fdfe1a1e0dcc53182a0f20fb8131
Files
-
d918c2808a96f42a01df02521c5d2501d069fdfe1a1e0dcc53182a0f20fb8131.exe windows:4 windows x86 arch:x86
3a8897c84eb41f36b4bbabcc617408b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 128KB - Virtual size: 688KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 308KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ