Static task
static1
Behavioral task
behavioral1
Sample
568e62e413e8a632696d9e8320cc1c1adfe66b7d10fc0c469eecf5e1d948da33.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
568e62e413e8a632696d9e8320cc1c1adfe66b7d10fc0c469eecf5e1d948da33.exe
Resource
win10v2004-20230915-en
General
-
Target
568e62e413e8a632696d9e8320cc1c1adfe66b7d10fc0c469eecf5e1d948da33
-
Size
14KB
-
MD5
41c29e0e757090525b8f44c8385630bb
-
SHA1
22c94fd9607b1153918d6fc3a0f83a6cedad7fd5
-
SHA256
568e62e413e8a632696d9e8320cc1c1adfe66b7d10fc0c469eecf5e1d948da33
-
SHA512
95dc9093b395504dfbcdd9c4fd2987f61fdce82ee08042e1a639767c1c417808e4e7adf41a4ed7efdd9669e21a4c0c86f4cff161dfee249ec2da23080919b6cb
-
SSDEEP
192:SOcrEQ8XZGMxpJSwZCbP3TSEmZH46A3CzYWu58u51YxOghs3nnnnnn+:hoELIeMNmXA3CzYd5r51Yx1h3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 568e62e413e8a632696d9e8320cc1c1adfe66b7d10fc0c469eecf5e1d948da33
Files
-
568e62e413e8a632696d9e8320cc1c1adfe66b7d10fc0c469eecf5e1d948da33.exe windows:4 windows x86
0492baea297996815693da7f4b834882
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetModuleFileNameA
DeleteFileA
CloseHandle
ReadFile
GetFileSize
CreateFileA
WriteFile
GetCommandLineA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleA
user32
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
msvcrt
rand
strrchr
malloc
realloc
_ftol
free
shlwapi
PathFileExistsA
shell32
ShellExecuteA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 934B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ