Static task
static1
Behavioral task
behavioral1
Sample
124e16bfa7c6118f7525931420d8b01b0d0ca3defaadce9ee623e19f8c06609d.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
124e16bfa7c6118f7525931420d8b01b0d0ca3defaadce9ee623e19f8c06609d.exe
Resource
win10v2004-20230703-en
General
-
Target
124e16bfa7c6118f7525931420d8b01b0d0ca3defaadce9ee623e19f8c06609d
-
Size
536KB
-
MD5
70ac29908603b7df2e5d7c36406ee0f3
-
SHA1
ad33cb4efcb1d92a382d0638183df8113de9c883
-
SHA256
124e16bfa7c6118f7525931420d8b01b0d0ca3defaadce9ee623e19f8c06609d
-
SHA512
69bbb4b83d2eaff313f56f42a78ec55f2d7a649384f157f47f44556b881683143bb8717d274affca41a3049edbc83fe3aeb80ffcb76048b5eca3ff0f775d0fa1
-
SSDEEP
6144:myPvhYOgnVJ+ZEaAYxziu4K4nD27X3AmEFicvl11ojZbzhU:m8YznVwZEaAYxzZ/7g9ic911ojZ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 124e16bfa7c6118f7525931420d8b01b0d0ca3defaadce9ee623e19f8c06609d
Files
-
124e16bfa7c6118f7525931420d8b01b0d0ca3defaadce9ee623e19f8c06609d.exe windows x86
940dc92f00644b252890c4fef3958d51
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
HeapFree
SetUnhandledExceptionFilter
HeapAlloc
HeapReAlloc
VirtualFree
VirtualAlloc
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetConsoleCtrlHandler
IsBadCodePtr
ReadFile
SetStdHandle
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CreateFileA
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableA
Sections
.text Size: 456KB - Virtual size: 453KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ