Static task
static1
Behavioral task
behavioral1
Sample
c13d3c01450cc17d0938df3e27ddd9374e2fe2482c30ec129156cbf0f177785c.exe
Resource
win7-20240903-en
General
-
Target
c13d3c01450cc17d0938df3e27ddd9374e2fe2482c30ec129156cbf0f177785c
-
Size
12.4MB
-
MD5
5694bb0f63ea8af59fd9874bc8f4d0dd
-
SHA1
722c5f915353feceff22bf2080ddfc892cb0732a
-
SHA256
c13d3c01450cc17d0938df3e27ddd9374e2fe2482c30ec129156cbf0f177785c
-
SHA512
47d26b9ffbd35074b59f47dcb4ca94eff076a36401e897764ad1b7fe301bbe85aefbcad0659f89a56b6cea590d88a62545c5d613fa9441b8df66ba92f16811f9
-
SSDEEP
196608:ufCsumTHg89dGq+cjvJFGKWUGNEoiN/A4sX61dql3KrXxkXbeOKjUbe6am7x:ufHTHgedGq+cdppGNvX6+CxMeOKYbe2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c13d3c01450cc17d0938df3e27ddd9374e2fe2482c30ec129156cbf0f177785c
Files
-
c13d3c01450cc17d0938df3e27ddd9374e2fe2482c30ec129156cbf0f177785c.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 3.7MB - Virtual size: 5.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1000KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hisvjfmo Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bcqvotec Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE