Static task
static1
Behavioral task
behavioral1
Sample
2383b8c63bc11d86a161949fc21a9d114df1ce3e399eabae0d64debc928c5358.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2383b8c63bc11d86a161949fc21a9d114df1ce3e399eabae0d64debc928c5358.exe
Resource
win10v2004-20230703-en
General
-
Target
2383b8c63bc11d86a161949fc21a9d114df1ce3e399eabae0d64debc928c5358
-
Size
80KB
-
MD5
c1fa792a984b7e547d6246d32ad2962f
-
SHA1
6b27cb049f9af93a3e844ea321999a52a7642beb
-
SHA256
2383b8c63bc11d86a161949fc21a9d114df1ce3e399eabae0d64debc928c5358
-
SHA512
0b6bdce230a1fec1a91fdc8706909ae2ddbabac89cfecdc54e4c6c460fb5f9444267d247e79de208924c645471d5028b555c2cf8c8a37f6bb3f4f87f7a0da9df
-
SSDEEP
1536:sgIjesqduP3Fpuuuuuul8GunhKibm0Vb6FgnP7R986ugJiE8L/:js0LKibmUuI86u24
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2383b8c63bc11d86a161949fc21a9d114df1ce3e399eabae0d64debc928c5358
Files
-
2383b8c63bc11d86a161949fc21a9d114df1ce3e399eabae0d64debc928c5358.exe windows x86
2125b072455d47263d576efd90ae3bbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
Icmp6CreateFile
Icmp6SendEcho2
IcmpCloseHandle
IcmpCreateFile
IcmpSendEcho2
kernel32
DeleteCriticalSection
EnterCriticalSection
FillConsoleOutputCharacterW
FindResourceExW
FlushFileBuffers
FormatMessageW
FreeLibrary
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileType
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LocalFree
LockResource
QueryPerformanceCounter
RtlUnwind
SetConsoleCursorPosition
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
WriteConsoleW
WriteFile
msvcrt
__dllonexit
__lconv_init
__set_app_type
__setusermatherr
__wgetmainargs
__winitenv
_amsg_exit
_cexit
_fmode
_fpreset
_initterm
_iob
_lock
_onexit
_unlock
_vsnwprintf
_wcmdln
_winmajor
abort
calloc
exit
fprintf
free
fwrite
malloc
memmove
puts
signal
strncmp
vfprintf
wcslen
wcstoul
ws2_32
FreeAddrInfoW
GetAddrInfoW
GetNameInfoW
WSACleanup
WSAStartup
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 820B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rossym Size: 30KB - Virtual size: 29KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ