Static task
static1
Behavioral task
behavioral1
Sample
14ba53281e67bfb923dbabfe6f3f9e78327739d705471a1d2b7bbf684bc84e5e.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
14ba53281e67bfb923dbabfe6f3f9e78327739d705471a1d2b7bbf684bc84e5e.exe
Resource
win10v2004-20240802-en
General
-
Target
14ba53281e67bfb923dbabfe6f3f9e78327739d705471a1d2b7bbf684bc84e5e
-
Size
1.3MB
-
MD5
21b8a93cac7f1fa95ddd173c49f4ca92
-
SHA1
b909592d49f34f075b771a558141bed634ce3c78
-
SHA256
14ba53281e67bfb923dbabfe6f3f9e78327739d705471a1d2b7bbf684bc84e5e
-
SHA512
c3784af88eecfc7650bbd16dcabdb5f08d0fd57c7ed0b4028b841c250d855b8b74a64d57f26b25d1ce24f1c9a2849e9000330d40a07ad4a2db9b1f51e0808667
-
SSDEEP
24576:k0oke8wfTBmnBaMcVbWwG45cwerQJ/UZHl055hKVv8rdhVtITMg5/E5II:hoXdAaMYWT45cwAq/+c5hCvaFykII
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14ba53281e67bfb923dbabfe6f3f9e78327739d705471a1d2b7bbf684bc84e5e
Files
-
14ba53281e67bfb923dbabfe6f3f9e78327739d705471a1d2b7bbf684bc84e5e.exe windows:5 windows x86 arch:x86
a9ac0d2510c24e399676f9833f4b5ab0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAWaitForMultipleEvents
crypt32
CertFreeCertificateChain
kernel32
ExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
TranslateMessage
advapi32
CryptGetHashParam
shell32
SHGetFolderPathW
ntdll
NtResumeThread
bcrypt
BCryptGenRandom
Sections
.text Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.be0 Size: 454KB - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.be1 Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 272KB - Virtual size: 271KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ