Start
Static task
static1
Behavioral task
behavioral1
Sample
1c80e79dd7cfc8b0dff6a94ab5859bd6fe913f4fc3b41c29c2042d1ef8375b0d.exe
Resource
win7-20240221-en
General
-
Target
1c80e79dd7cfc8b0dff6a94ab5859bd6fe913f4fc3b41c29c2042d1ef8375b0d
-
Size
4.2MB
-
MD5
52270baf082772240105808ebab4a79f
-
SHA1
c66fa2b2f68d196f5f83177def298e64e8a9f0b1
-
SHA256
1c80e79dd7cfc8b0dff6a94ab5859bd6fe913f4fc3b41c29c2042d1ef8375b0d
-
SHA512
1ccaf7afc142ca789b564ed2f788a830b6b4ab882c3cc2b8cab3319ba5900c25fab967677d0bbdc5f3af8c5482745a234cd6ce5fdd2b000a33adf245f4d281ff
-
SSDEEP
98304:v1yRa/A4KwClJgg1uvoGitYbXObGCQADR56x4s8S5U1UQpkhlw:v1yREFCntkt+YbX9zAV566OuGw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c80e79dd7cfc8b0dff6a94ab5859bd6fe913f4fc3b41c29c2042d1ef8375b0d
Files
-
1c80e79dd7cfc8b0dff6a94ab5859bd6fe913f4fc3b41c29c2042d1ef8375b0d.exe windows:6 windows x86 arch:x86
2f93cd80e5dfeca07d7e8b0f35545fb5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
wsprintfA
gdi32
CreateCompatibleBitmap
advapi32
RegQueryValueExA
shell32
ShellExecuteA
ole32
CoInitialize
ws2_32
WSAStartup
crypt32
CryptUnprotectData
shlwapi
PathFindExtensionA
gdiplus
GdipGetImageEncoders
setupapi
SetupDiEnumDeviceInfo
ntdll
RtlUnicodeStringToAnsiString
rstrtmgr
RmStartSession
Exports
Exports
Sections
.MPRESS1 Size: 4.1MB - Virtual size: 10.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE