Static task
static1
Behavioral task
behavioral1
Sample
f18c19637efde7b6f3e5560e36850805fc62c792b9eea95a6cbc0ed00f36d731.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f18c19637efde7b6f3e5560e36850805fc62c792b9eea95a6cbc0ed00f36d731.exe
Resource
win10v2004-20240412-en
General
-
Target
f18c19637efde7b6f3e5560e36850805fc62c792b9eea95a6cbc0ed00f36d731
-
Size
3.0MB
-
MD5
db5d45269f06667cbd2f4718699d7161
-
SHA1
dfe3c3bf2f4c02eb935d264b80bb7bab8ffb819e
-
SHA256
f18c19637efde7b6f3e5560e36850805fc62c792b9eea95a6cbc0ed00f36d731
-
SHA512
d090c53e53a1bb0f146080da6447421c3a7d1bf6c84ae9be4f637a94509d0b921efe489cf949b6859dccec75bd04c56d6dc38032e8c60fd10099eb2b5e3ad812
-
SSDEEP
98304:ITb8UBh8a3d7oSIvo4NfSgr8D/IN+zQvr4nns:In8UBh80UvoMk/+v6ns
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f18c19637efde7b6f3e5560e36850805fc62c792b9eea95a6cbc0ed00f36d731
Files
-
f18c19637efde7b6f3e5560e36850805fc62c792b9eea95a6cbc0ed00f36d731.exe windows:4 windows x86 arch:x86
006aa32705c27d3161b97b32dd7b3245
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
__vbaVarTstGt
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
kernel32
GetModuleFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 2.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 912KB - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ