Static task
static1
Behavioral task
behavioral1
Sample
2ddea0bfc8e5f9ceaf524a1ea2716d12a430c2b0c64e5d6f8c411da5fa6bffe1.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2ddea0bfc8e5f9ceaf524a1ea2716d12a430c2b0c64e5d6f8c411da5fa6bffe1.exe
Resource
win10v2004-20230915-en
General
-
Target
2ddea0bfc8e5f9ceaf524a1ea2716d12a430c2b0c64e5d6f8c411da5fa6bffe1
-
Size
99KB
-
MD5
c1672b14f95384b2cd3178176f70016d
-
SHA1
e32ce649a89d7e23de6ae1bff01b72198725374d
-
SHA256
2ddea0bfc8e5f9ceaf524a1ea2716d12a430c2b0c64e5d6f8c411da5fa6bffe1
-
SHA512
a75bd3c9f280addae8c68aeaa66207fecd995362c0466c87561945b41ae245fe89e502d39b81e063fe6ec3d0094d937c96caee81e00aaf350d903e905cd7ab37
-
SSDEEP
1536:czHE1olR7eLMOd2uY6rxqXtIpbbeb1sZbeoL338b8DDJf7R9whjok3xowSTa1LD8:b1olR7eLMv5xaZbesDD6oGPfYPuJA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ddea0bfc8e5f9ceaf524a1ea2716d12a430c2b0c64e5d6f8c411da5fa6bffe1
Files
-
2ddea0bfc8e5f9ceaf524a1ea2716d12a430c2b0c64e5d6f8c411da5fa6bffe1.exe windows:4 windows x64
16374147287af6e43c9f258c8b32ffbc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__C_specific_handler
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_errno
_fmode
_initterm
_memccpy
_onexit
_strdup
abort
atoi
calloc
exit
fclose
fflush
fopen
fprintf
fputs
fread
free
fwrite
malloc
memcpy
memset
perror
printf
signal
sprintf
sscanf
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
vfprintf
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 900B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/19 Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/31 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/45 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/57 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/70 Size: 512B - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ