Static task
static1
Behavioral task
behavioral1
Sample
1_old_patched.exe
Resource
win7-20230220-en
General
-
Target
1_old_patched.exe
-
Size
824KB
-
MD5
8dcfa08e78190410fca110439148ebed
-
SHA1
d6609357ef5dd1af0ef9587298ce8fb4db6991fb
-
SHA256
01a26675596d25be391f0385912b7bddaf93314e5c80f6afb92607624fd7ac4b
-
SHA512
877cf9b6139253affe22c866a5ab82647c7cf412fe7eb7aeff813677ef66d95219ec0804b43f98af9d8fffdf777c4980441fb939b2962bc2470827af22791ed4
-
SSDEEP
12288:llhrGqJVYoBNlaEL8/OQGjuRPK8fYvCJdZOwSb0yOHvfzIyH87:llpASjFmBGjc/tz1TPR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1_old_patched.exe
Files
-
1_old_patched.exe.exe windows x86
eac993ded5f7f191ae3f2d92f5006ffb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
GetRecordInfoFromGuids
GetErrorInfo
gdi32
SetDIBColorTable
advapi32
SetThreadToken
shlwapi
UrlCanonicalizeA
setupapi
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
kernel32
GetBinaryTypeA
LoadLibraryA
LeaveCriticalSection
LoadLibraryExW
GetModuleHandleW
GetSystemTimeAsFileTime
CreateEventA
TerminateProcess
CreateIoCompletionPort
WaitForSingleObject
CreateToolhelp32Snapshot
SetStdHandle
SetLastError
GlobalMemoryStatus
GetModuleFileNameA
MoveFileW
user32
CloseWindow
GetLastInputInfo
RemoveMenu
DefWindowProcA
GetUpdateRgn
GetMessageA
AppendMenuA
RegisterClassA
DispatchMessageA
CreateWindowExA
msvcrt
memset
ole32
CoFreeUnusedLibrariesEx
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 600KB - Virtual size: 597KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ