Static task
static1
Behavioral task
behavioral1
Sample
1f11f782a48c1e8b8523ed6e50bb0b1b5c953327438e8f8f17248b10bfb05c3c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1f11f782a48c1e8b8523ed6e50bb0b1b5c953327438e8f8f17248b10bfb05c3c.exe
Resource
win10v2004-20240419-en
General
-
Target
1f11f782a48c1e8b8523ed6e50bb0b1b5c953327438e8f8f17248b10bfb05c3c
-
Size
278KB
-
MD5
6c4c84641e969a238cfa00e7103e769e
-
SHA1
cbf135d6264680d6ea46a4e376e4d3c4a4f70e1c
-
SHA256
1f11f782a48c1e8b8523ed6e50bb0b1b5c953327438e8f8f17248b10bfb05c3c
-
SHA512
4497e7aa9610d7e4bfe7ebd3eb27154272f0664e29927c6812029270491a56e43a62bcd1693ff194f3673ed91e50b179a08d07f9864af16e13cc1157228bc16f
-
SSDEEP
6144:8I7S5BlQnfiS8C5o1F3wxMOH7AnnNkRgSbGqJS2Z:klj1TIMs5RgSC2Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1f11f782a48c1e8b8523ed6e50bb0b1b5c953327438e8f8f17248b10bfb05c3c
Files
-
1f11f782a48c1e8b8523ed6e50bb0b1b5c953327438e8f8f17248b10bfb05c3c.exe windows:4 windows x86 arch:x86
8f26516a865bac7defe3c3617c12b0f5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CreateFileW
user32
LoadCursorA
LoadCursorW
msvcrt
_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
isdigit
time
srand
rand
advapi32
RegOpenKeyW
RegSetValueExW
RegFlushKey
RegOpenKeyExA
RegQueryValueExA
RegDeleteValueW
RegQueryValueExW
RegCreateKeyW
RegCloseKey
Sections
.rdata10 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata9 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata8 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata7 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata6 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata5 Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata4 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text9 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata44 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.ropf Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ