Static task
static1
Behavioral task
behavioral1
Sample
1e5c768ffbaeba7b79ccbc4a8e034caf53dc1e3c21132543cbeb61fbfc02d76a.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1e5c768ffbaeba7b79ccbc4a8e034caf53dc1e3c21132543cbeb61fbfc02d76a.exe
Resource
win10v2004-20241007-en
General
-
Target
1e5c768ffbaeba7b79ccbc4a8e034caf53dc1e3c21132543cbeb61fbfc02d76a
-
Size
324KB
-
MD5
8d3172f08e18c3a8f14c8368f02fa7aa
-
SHA1
e44f2cd8263a8dcc44ee0774a383719769c2d97e
-
SHA256
1e5c768ffbaeba7b79ccbc4a8e034caf53dc1e3c21132543cbeb61fbfc02d76a
-
SHA512
2fa2bca2efe4672a1683ec6cb73c67a4a5d608269670b40cac69fa7c670eab1dd7712ad03249807d6d0ab3493faf477830f738d803621dcff2b64d4a9ea561ef
-
SSDEEP
6144:gOG3iGcFFTnJvsxgbZM+DqEqj43CUcqaRp95aLXlk4x4sBcjhSI8aH/:kiGcLTn1dMSpqj432RILXGOFV6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e5c768ffbaeba7b79ccbc4a8e034caf53dc1e3c21132543cbeb61fbfc02d76a
Files
-
1e5c768ffbaeba7b79ccbc4a8e034caf53dc1e3c21132543cbeb61fbfc02d76a.exe windows:5 windows x86 arch:x86
aca35d13adb97d2c480a39887a5f629a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
wsock32
gethostbyname
winmm
mixerOpen
version
VerQueryValueA
comctl32
ord6
psapi
GetModuleBaseNameA
wininet
InternetOpenA
user32
GetDC
gdi32
BitBlt
comdlg32
GetSaveFileNameA
advapi32
RegCloseKey
shell32
DragFinish
ole32
CoGetObject
oleaut32
SafeArrayGetLBound
Sections
.MPRESS1 Size: 298KB - Virtual size: 740KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE