Static task
static1
Behavioral task
behavioral1
Sample
1519dc4cc37474f825deae17d9e7d6f06721bbe4c3e2bddcf01e667f8a1ce65f.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1519dc4cc37474f825deae17d9e7d6f06721bbe4c3e2bddcf01e667f8a1ce65f.exe
Resource
win10v2004-20240426-en
General
-
Target
1519dc4cc37474f825deae17d9e7d6f06721bbe4c3e2bddcf01e667f8a1ce65f
-
Size
2.5MB
-
MD5
ee8fda392dbb0e44f279700ab1fe1462
-
SHA1
76760265c7cb5d2eac06c14f680fe206304eeefe
-
SHA256
1519dc4cc37474f825deae17d9e7d6f06721bbe4c3e2bddcf01e667f8a1ce65f
-
SHA512
2fcf5e563c783d163a079f6333c6eaf3658ebbb3b01ff412fb0556e1d0413d5cf5bbce37c65001fa3db093bbf5d33952520a906d0d8768ad1a7ef1056b148521
-
SSDEEP
49152:9jM0ELrTp7bcaxe8hZwIMq9gf3tU7totLiEeBM9r3KE:9A0ELHp7bcaY8J6dUJojS1E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1519dc4cc37474f825deae17d9e7d6f06721bbe4c3e2bddcf01e667f8a1ce65f
Files
-
1519dc4cc37474f825deae17d9e7d6f06721bbe4c3e2bddcf01e667f8a1ce65f.exe windows:5 windows x86 arch:x86
7a6093edf479e05140f21316c5da7451
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetVersionExA
LoadLibraryA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
user32
LoadIconA
CharUpperBuffW
gdi32
GetTextMetricsA
winmm
midiOutReset
winspool.drv
ClosePrinter
advapi32
RegOpenKeyExA
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
inet_ntoa
comdlg32
GetFileTitleA
wtsapi32
WTSSendMessageW
Sections
.text Size: 584KB - Virtual size: 582KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zzds0 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.zzds1 Size: 252KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ