Static task
static1
Behavioral task
behavioral1
Sample
1671eb7f8d0c0ba52b3dc8247e1b4f6fe21cc279eff0c671fd399c7a69460ff9N.exe
Resource
win7-20240903-en
General
-
Target
1671eb7f8d0c0ba52b3dc8247e1b4f6fe21cc279eff0c671fd399c7a69460ff9N.exe
-
Size
187KB
-
MD5
be440b21677ceac9aa978b2a6a773fa0
-
SHA1
d089628b91e710d9248caedd8460140498bb8346
-
SHA256
1671eb7f8d0c0ba52b3dc8247e1b4f6fe21cc279eff0c671fd399c7a69460ff9
-
SHA512
54b02e9d216b1e974496665429de3d6e5e4b61254fa81bbbf9ac59b53f4bd04576a97cb94ebc7da86b37e9a7ec27065b43bb3581e5b2f572717074d6fcd5d8cd
-
SSDEEP
3072:e16lfu9h227EdUDG1EGJAA2boHMLaIWP9bw6QwtzoK1xqKEnqlHhn:e1Gu9pP6AA2bVLaIWlRhTqKEWHh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1671eb7f8d0c0ba52b3dc8247e1b4f6fe21cc279eff0c671fd399c7a69460ff9N.exe
Files
-
1671eb7f8d0c0ba52b3dc8247e1b4f6fe21cc279eff0c671fd399c7a69460ff9N.exe.exe windows:4 windows x86 arch:x86
f280fa110fefddbd034d2e56f2764bd2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
rpcrt4
UuidCreate
kernel32
GetPrivateProfileIntW
GlobalFindAtomW
GetPrivateProfileStringW
LoadLibraryExW
LocalFree
WaitForSingleObject
GetWindowsDirectoryA
CopyFileW
GetModuleHandleA
FindFirstFileW
WritePrivateProfileStringW
GetProcessHeap
GetModuleHandleW
LoadLibraryExA
GetCurrentDirectoryW
ReleaseMutex
CreateMutexW
GetSystemInfo
FindClose
EnumResourceLanguagesA
HeapFree
GetSystemDirectoryW
lstrcmpiW
GetPrivateProfileIntW
GetCurrentProcessId
SetFileAttributesW
ExpandEnvironmentStringsW
HeapAlloc
FreeLibrary
lstrlenA
LoadLibraryW
FindNextFileW
GetCurrentProcess
shlwapi
GetAcceptLanguagesA
PathFindExtensionW
PathRemoveFileSpecW
StrCmpIW
PathIsRelativeW
UrlCreateFromPathW
UrlUnescapeW
PathAppendW
PathCreateFromUrlW
PathCombineW
Sections
.text Size: 94KB - Virtual size: 234KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ