Static task
static1
Behavioral task
behavioral1
Sample
f78453b8c9288bc05b487c753e62a928052692be44155e67e29a00b8952980e2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
f78453b8c9288bc05b487c753e62a928052692be44155e67e29a00b8952980e2.exe
Resource
win10v2004-20230915-en
General
-
Target
f78453b8c9288bc05b487c753e62a928052692be44155e67e29a00b8952980e2
-
Size
28KB
-
MD5
e58c05e46f8685c0dbeb385452bcdb4f
-
SHA1
359b497330132b9c8ae73a69ab1283c555ef9fe5
-
SHA256
f78453b8c9288bc05b487c753e62a928052692be44155e67e29a00b8952980e2
-
SHA512
7f91bb2c4b58561469525daa65d4c61634998152cfa562cabbea82013163bda4ef9ec8a171cabf859cbdc0817c53844afdac614d0141dd6ce2d9430941bdc4a0
-
SSDEEP
384:J+tIXlmebO0Jkfyfdd7TcRG+htik5bd6YXavKI3wfoC0HezYQfZyBW/ua/9/nk:dXlO0JH73+htik5bdFpjRS6ua/9/nk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f78453b8c9288bc05b487c753e62a928052692be44155e67e29a00b8952980e2
Files
-
f78453b8c9288bc05b487c753e62a928052692be44155e67e29a00b8952980e2.exe windows:5 windows x64
6c15677fa7211ce8a3dda8c6c9101118
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
oleaut32
SysAllocStringLen
VariantChangeType
SysFreeString
SysAllocString
VariantClear
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayGetElement
ole32
CoUninitialize
CoCreateInstance
CoInitializeSecurity
CoInitialize
user32
LoadStringW
msvcrt
bsearch
sprintf
strchr
malloc
__setusermatherr
_amsg_exit
__wgetmainargs
__set_app_type
exit
_cexit
_fpreset
_initterm
memmove
_wcmdln
signal
__lconv_init
strlen
strcmp
strcpy
memcpy
memcmp
_wcsicmp
wcslen
wcscpy
wcscat
_vsnwprintf
_snwprintf
strcspn
memset
__winitenv
kernel32
SetUnhandledExceptionFilter
GetStartupInfoW
LocalFree
TlsGetValue
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
LoadLibraryW
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
Sleep
LocalAlloc
GetLastError
GetEnvironmentVariableA
WriteConsoleW
WriteFile
HeapFree
HeapAlloc
GetStdHandle
GetProcessHeap
GetModuleHandleW
SetLastError
GetProcAddress
LocalReAlloc
ntdll
vDbgPrintExWithPrefix
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ