Static task
static1
Behavioral task
behavioral1
Sample
SystemPropertiesComputerName.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SystemPropertiesComputerName.exe
Resource
win10v2004-20230220-en
General
-
Target
SystemPropertiesComputerName.exe
-
Size
81KB
-
MD5
8618b83b5abea87429e5fffea0f66a1d
-
SHA1
cceb5dcf20dd4bb362cad2f4c36f31137f07d32d
-
SHA256
1425d610beb0e3cc092ebe55ca1817ad0ae703489a20bfcabe52e0e2473a8a54
-
SHA512
d4af7f1578ea27ae4ce1df6413e5886e4a78e010c9fe2edce596c6580f3d3b4726300920bc006404868c9b7e3f11ed6aa271a2fbf3ade8bc155a5554f1d33b94
-
SSDEEP
1536:cELZKtREC/rMcgEPJV+G57ThjEC0kzJP+V5Jx:cAKzECTMpuDhjRVJG7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SystemPropertiesComputerName.exe
Files
-
SystemPropertiesComputerName.exe.exe windows x86
b788892ae84ba86201a726810f01cb07
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__setusermatherr
_except_handler4_common
_controlfp
?terminate@@YAXXZ
_wcmdln
_initterm
_XcptFilter
__p__fmode
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
sysdm.cpl
DisplaySYSDMCPL
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-processthreads-l1-1-0
GetCurrentProcess
TerminateProcess
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
api-ms-win-core-errorhandling-l1-1-0
UnhandledExceptionFilter
SetUnhandledExceptionFilter
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleW
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetTickCount
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ