Static task
static1
Behavioral task
behavioral1
Sample
fa5aeb1ba52e6135818b31aef72d9736f94c9a55d140c9344a8c7279f1fb31b0.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
fa5aeb1ba52e6135818b31aef72d9736f94c9a55d140c9344a8c7279f1fb31b0.exe
Resource
win10v2004-20230915-en
General
-
Target
fa5aeb1ba52e6135818b31aef72d9736f94c9a55d140c9344a8c7279f1fb31b0
-
Size
56KB
-
MD5
e29874a9134b637a1510aecf41a38412
-
SHA1
29b30e5e7a576288103f3eb56c86f740a294d331
-
SHA256
fa5aeb1ba52e6135818b31aef72d9736f94c9a55d140c9344a8c7279f1fb31b0
-
SHA512
9b7b5adeff717e1c7e01b3d97e1473d3cd179a1386691d67f08be700ee22641e7dc9291b12606bb6b9a637551c75ff186a83864734725b61ad374499892389a3
-
SSDEEP
768:mR0o4auVmobTTWsc2DVAfVpYPCgOYhkt7xU1N2U:my4JmTTs2yj4CgOttNUb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa5aeb1ba52e6135818b31aef72d9736f94c9a55d140c9344a8c7279f1fb31b0
Files
-
fa5aeb1ba52e6135818b31aef72d9736f94c9a55d140c9344a8c7279f1fb31b0.exe windows:4 windows x86
f88a853a3aa2bf8a266658fa60f9d57a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
LocalAlloc
CreateDirectoryW
LocalFree
RtlMoveMemory
CreateWaitableTimerA
SetWaitableTimer
CloseHandle
GetCurrentProcess
OpenProcess
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
WriteFile
CreateFileA
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
InterlockedDecrement
InterlockedIncrement
shlwapi
PathIsDirectoryW
user32
DispatchMessageA
GetMessageA
MessageBoxA
MsgWaitForMultipleObjects
PeekMessageA
wsprintfA
TranslateMessage
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 756B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ