Static task
static1
Behavioral task
behavioral1
Sample
13b6bc88898c2e24465032d06c3988ae0b35695f9a16cb7f88de5c2702be4fed.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
13b6bc88898c2e24465032d06c3988ae0b35695f9a16cb7f88de5c2702be4fed.exe
Resource
win10v2004-20240508-en
General
-
Target
13b6bc88898c2e24465032d06c3988ae0b35695f9a16cb7f88de5c2702be4fed
-
Size
225KB
-
MD5
837a0bc1edf64ba537f0c46fb8f19f6d
-
SHA1
9f3ec90fce27b0af24950a2f7d09172d3a6d437b
-
SHA256
13b6bc88898c2e24465032d06c3988ae0b35695f9a16cb7f88de5c2702be4fed
-
SHA512
34f7906e189d3fb8fbef52cefd23d639ab978a0595297432283c5fdde8cf7f835d3120cb73af120030cf8a5b37a22f3ae04436e56fb2fc15daa7c9ebb039204c
-
SSDEEP
6144:eqEdSmP1Z2XeZ8jmQtNEVC4DJ+qPGGw5U5T9OwQwyFC1nl:eqEdSKZ8jdtCj1+qOGw5UWBWnl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13b6bc88898c2e24465032d06c3988ae0b35695f9a16cb7f88de5c2702be4fed
Files
-
13b6bc88898c2e24465032d06c3988ae0b35695f9a16cb7f88de5c2702be4fed.exe windows:4 windows x86 arch:x86
889d2aba7e23c441b75364ab24c0a2d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ws2_32
WSASocketA
gdiplus
GdipCreateBitmapFromStreamICM
wininet
HttpOpenRequestA
user32
MessageBoxA
gdi32
StretchBlt
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
advapi32
RegDeleteKeyA
shell32
ShellExecuteExA
comctl32
_TrackMouseEvent
shlwapi
PathStripToRootA
oledlg
ord8
ole32
CoRegisterMessageFilter
oleaut32
SafeArrayDestroy
d3d9
Direct3DCreate9
Sections
.text Size: 203KB - Virtual size: 556KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE