Static task
static1
Behavioral task
behavioral1
Sample
ffd021461556b94bcb292671d1d999ff453230747dac5642234850de389894d4.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ffd021461556b94bcb292671d1d999ff453230747dac5642234850de389894d4.exe
Resource
win10v2004-20230831-en
General
-
Target
ffd021461556b94bcb292671d1d999ff453230747dac5642234850de389894d4
-
Size
33KB
-
MD5
7ea1c1c46104f1417e8e6b630b4dc11b
-
SHA1
b61a4d16abe7eff0963e74a072bd5be1c9290c50
-
SHA256
ffd021461556b94bcb292671d1d999ff453230747dac5642234850de389894d4
-
SHA512
8d29a6c7b2bc5a29178fb3fc230ef77524a4755ea26c0809e38fd7c32ca3d7366e97309a26e495e9155ea78da42222bb316826243fa8e9d1151a849b465e8637
-
SSDEEP
384:MD5aan80MoEiJx0PBOCoJ9AQi0az1Gmh+JOjtnIS75ZVOjeMM3uOCGLj1jcZaluo:Mfj3S1VRzj1jc8ysGG9K8J0YcQnyMJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ffd021461556b94bcb292671d1d999ff453230747dac5642234850de389894d4
Files
-
ffd021461556b94bcb292671d1d999ff453230747dac5642234850de389894d4.exe windows x64
9133c2b839a5a127e9f0ab3e90356536
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ole32
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
lstrcmpiW
lstrlenA
oleaut32
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayUnaccessData
VariantClear
VariantInit
user32
MessageBoxW
advapi32
GetUserNameW
shell32
SHLoadNonloadedIconOverlayIdentifiers
opencl
clCreateCommandQueue
clCreateUserEvent
clGetContextInfo
clGetPlatformIDs
clReleaseCommandQueue
clReleaseContext
clWaitForEvents
vcruntime140
__C_specific_handler
memcpy
memset
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-runtime-l1-1-0
_c_exit
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_get_narrow_winmain_command_line
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_app_type
exit
terminate
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ