Static task
static1
Behavioral task
behavioral1
Sample
c1e4814e72bb507a148c16be5709afe4e3d166c1aee04e093a4a8407c3fae3db.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
c1e4814e72bb507a148c16be5709afe4e3d166c1aee04e093a4a8407c3fae3db.exe
Resource
win10v2004-20240508-en
General
-
Target
c1e4814e72bb507a148c16be5709afe4e3d166c1aee04e093a4a8407c3fae3db
-
Size
352KB
-
MD5
a5a6b11ceee8cf70c3ae1fd8a26e16cd
-
SHA1
244e6f7828c48899a475ff388061d8f2bfbe6840
-
SHA256
c1e4814e72bb507a148c16be5709afe4e3d166c1aee04e093a4a8407c3fae3db
-
SHA512
3d397c803909fc32c67c7017369ebc092fabf388a1fa234d0dca36c607bd99751bca90ec54d7c8d1fa603df2cdc4cc0e8c953470377515c9b14b3131e08c3e4d
-
SSDEEP
6144:LjY/tQlhzDh1g9V264ZAAb2wGfuxwntI2nFLA7ZS0fXqP5JC3YY0Ax/IJF:X591g9Vv4GACvm/n7ZSyO8IY06/In
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c1e4814e72bb507a148c16be5709afe4e3d166c1aee04e093a4a8407c3fae3db
Files
-
c1e4814e72bb507a148c16be5709afe4e3d166c1aee04e093a4a8407c3fae3db.exe windows:5 windows x86 arch:x86
82b3a36decf28ebda90573542c4dc5af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
user32
LoadMenuW
advapi32
RegCloseKey
Sections
Size: - Virtual size: 168KB
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 93KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE