Static task
static1
Behavioral task
behavioral1
Sample
03212399.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
03212399.exe
Resource
win10v2004-20230220-en
General
-
Target
03212399.exe
-
Size
82KB
-
MD5
7c56b22b21a44b05d398de5418c63da6
-
SHA1
7a306e28fda7bb34fb4073549c3c569f8d7ae02a
-
SHA256
1e19745473755bdde452c81d4715e6d324ee06abca85b660c00746ab21817b31
-
SHA512
bcb6e5472986b7deff0b2923b7f391a7ef559268eb71b3269e9cc0e30dd226474577497582d2f42751deb780d6ff58af47ea58e6523e1287881db085c1b00db8
-
SSDEEP
1536:+eajvy2iy8grt0gFiB5O/mSZYoRcTyyxoAzy1UBfzqp1YN7vSRz+pF:6y2iy8gj4Bo/mSZYoRcTHxuUBfz1URz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03212399.exe
Files
-
03212399.exe.exe windows x86
2a2a662be9dffc461398e7c94d0b55b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
strlen
malloc
fopen
fwrite
fclose
memset
getenv
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit
kernel32
CreateProcessA
CloseHandle
SetUnhandledExceptionFilter
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ