Static task
static1
Behavioral task
behavioral1
Sample
ce193e83de60c392eb7846e9640f9369ff1d33407f4c182ccb4292ccd676b6ea.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ce193e83de60c392eb7846e9640f9369ff1d33407f4c182ccb4292ccd676b6ea.exe
Resource
win10v2004-20240412-en
General
-
Target
ce193e83de60c392eb7846e9640f9369ff1d33407f4c182ccb4292ccd676b6ea
-
Size
316KB
-
MD5
f8f2161a36b0e69d24934f33f2371747
-
SHA1
0ad42f2f178a37f21d68c12449cbd0126605a5ce
-
SHA256
ce193e83de60c392eb7846e9640f9369ff1d33407f4c182ccb4292ccd676b6ea
-
SHA512
58bbabac1dbbb04d3b7ca2a9595732e44e96f1ed2de454973a8b6bcb2c01e5cc3b512bcb77791322b59225045c246a0a5a45fafbe3463e6fd502554b5410ebd8
-
SSDEEP
3072:wNKDGqyLe/7BTMJklZ7ShT+XUrtsHj0X+Zdn2AJqP/MZpJrPktp1WQx:lDRQk7BTMJyZ+hT+lD0XYpkd13
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ce193e83de60c392eb7846e9640f9369ff1d33407f4c182ccb4292ccd676b6ea
Files
-
ce193e83de60c392eb7846e9640f9369ff1d33407f4c182ccb4292ccd676b6ea.exe windows:4 windows x86 arch:x86
9b5efce314c33bd6841992837be145c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegQueryValueW
RegSetValueExW
comctl32
CreateStatusWindowW
CreateToolbarEx
ImageList_Destroy
ImageList_DrawEx
ImageList_LoadImageW
InitCommonControlsEx
comdlg32
ChooseFontW
CommDlgExtendedError
gdi32
CreateFontIndirectW
CreateFontW
CreateRectRgn
CreateRectRgnIndirect
CreateSolidBrush
DeleteObject
ExtSelectClipRgn
GetClipRgn
GetDeviceCaps
GetObjectW
GetStockObject
GetTextExtentPoint32W
LineTo
MoveToEx
Rectangle
SelectClipRgn
SelectObject
SetBkMode
SetTextColor
kernel32
CloseHandle
CompareFileTime
CreateFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
GetCommandLineW
GetCurrentDirectoryW
GetDateFormatW
GetDiskFreeSpaceExW
GetDriveTypeW
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetLogicalDriveStringsW
GetModuleHandleW
GetNumberFormatW
GetProcAddress
GetStartupInfoW
GetTimeFormatW
GetVolumeInformationW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
LocalFree
MulDiv
MultiByteToWideChar
SetCurrentDirectoryW
SetErrorMode
lstrcmpW
lstrcmpiW
mpr
WNetConnectionDialog
WNetDisconnectDialog
WNetGetLastErrorW
ole32
CoGetMalloc
CoInitialize
CoUninitialize
shell32
ExtractIconExW
ord18
ord25
SHBindToParent
SHFileOperationW
SHGetDataFromIDListW
SHGetDesktopFolder
ShellAboutW
ShellExecuteExW
ShellExecuteW
shlwapi
StrFormatByteSizeW
ucrtbase
__p___argc
__p___wargv
__stdio_common_vswprintf
_assert
_configure_wide_argv
_get_initial_wide_environment
_initialize_wide_environment
_set_app_type
_wsplitpath
exit
memcmp
memcpy
memmove
qsort
setlocale
tolower
wcsrchr
user32
BeginDeferWindowPos
BeginPaint
CallNextHookEx
CallWindowProcW
CharUpperW
CheckMenuItem
CreatePopupMenu
CreateWindowExW
DefFrameProcW
DefMDIChildProcW
DeferWindowPos
DestroyIcon
DestroyWindow
DialogBoxParamW
DispatchMessageW
DrawIconEx
DrawTextW
EndDeferWindowPos
EndDialog
EndPaint
FillRect
GetCapture
GetClientRect
GetCursorPos
GetDC
GetDlgItem
GetFocus
GetKeyState
GetMenuItemCount
GetMessageW
GetParent
GetScrollPos
GetSubMenu
GetSystemMetrics
GetWindow
GetWindowInfo
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextW
InvalidateRect
IsIconic
IsWindowVisible
IsZoomed
LoadAcceleratorsW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
LoadStringW
MapWindowPoints
MessageBoxW
MoveWindow
PostQuitMessage
RedrawWindow
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
ReleaseCapture
ReleaseDC
ScreenToClient
ScrollWindowEx
SendMessageW
SetCapture
SetCursor
SetDlgItemTextW
SetFocus
SetWindowLongW
SetWindowPlacement
SetWindowTextW
SetWindowsHookExW
ShowWindow
TrackPopupMenu
TranslateAcceleratorW
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UpdateWindow
WinHelpW
wsprintfW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Sections
.text Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 224KB - Virtual size: 220KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE