Static task
static1
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7-20230712-en
General
-
Target
baff6b69f53faac96cd6f8e05c7b2df69cb0cacf503030153f2edc09cf44e44d.bin.sample.gz
-
Size
17KB
-
MD5
01d0ac738599be917020e2e54497fc53
-
SHA1
3156574e60cc9eee799c0492daf22efd14962309
-
SHA256
a0863674d98ec12204bd712ca2a7f4e32b052ab2517a7d80da3f91c014d7469c
-
SHA512
04a2c9a1f7d87cdd151408f3cc309d4517f47a38c9a8a13efc564693d3d386e640103c7b4ef59c2b81155c2c45d0c9f12a91d4d8a0ca2bd3b7ce10a0f2bae38f
-
SSDEEP
384:qhJcUprwVnmohTyg+RrQCyObJrKNqhp9zi9BCG:kJcUpmmCyg+VZySJr7xM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/sample
Files
-
baff6b69f53faac96cd6f8e05c7b2df69cb0cacf503030153f2edc09cf44e44d.bin.sample.gz.gz
-
sample.exe windows x86
0691a2556c652a4f42a283fedfe84bf1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetFolderPathA
ole32
CoCreateInstance
CoSetProxyBlanket
CoInitialize
oleaut32
VariantClear
SysAllocString
SysFreeString
kernel32
DeleteFileA
EnterCriticalSection
ExitProcess
GetCommandLineA
GetExitCodeProcess
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersionExA
InitializeCriticalSection
LeaveCriticalSection
PeekNamedPipe
RtlUnwind
WideCharToMultiByte
lstrlenW
CreatePipe
user32
LoadCursorA
LoadIconA
GetMessageA
TranslateMessage
DispatchMessageA
OemToCharA
RegisterClassA
PostQuitMessage
CreateWindowExA
DestroyWindow
DefWindowProcA
gdi32
GetStockObject
advapi32
ChangeServiceConfig2A
CloseServiceHandle
CreateServiceA
OpenSCManagerA
OpenServiceA
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceA
StartServiceCtrlDispatcherA
RegOpenKeyExA
RegQueryValueExA
crtdll
__GetMainArgs
exit
raise
signal
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE