Static task
static1
Behavioral task
behavioral1
Sample
dc58c313cd246e53231cf88cecef8a73a37272b65d27792800f4c63836ccc5d1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
dc58c313cd246e53231cf88cecef8a73a37272b65d27792800f4c63836ccc5d1.exe
Resource
win10v2004-20230703-en
General
-
Target
dc58c313cd246e53231cf88cecef8a73a37272b65d27792800f4c63836ccc5d1
-
Size
1.2MB
-
MD5
c85592bce80d26a4f82181baf9d64dfb
-
SHA1
6256a0f4be0858c1decdfa7db3e3a9c9dfde4380
-
SHA256
dc58c313cd246e53231cf88cecef8a73a37272b65d27792800f4c63836ccc5d1
-
SHA512
c18212c6f51cc44fb1a2af94823aba804b78736fbee2195df9da944bd4b96f7f199ce8da1c5a12d7e32c2cb19e11400990d0a3845a22e4b243423f303e349e4b
-
SSDEEP
24576:aknJ6hrUrXqM9IUjVrRhbo/FEJSGZmh5ASBo7VRVpIOOi3W3gAT:akyYt9ImRhcEJh2PBogOXW3LT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc58c313cd246e53231cf88cecef8a73a37272b65d27792800f4c63836ccc5d1
Files
-
dc58c313cd246e53231cf88cecef8a73a37272b65d27792800f4c63836ccc5d1.exe windows x86
65ae5cf17140aeaf91e3e9911da0ee3e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
CreateDirectoryA
GetTempPathA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
GetStringTypeA
LCMapStringW
LCMapStringA
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
GetStringTypeW
user32
MessageBoxA
wsprintfA
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ