Static task
static1
Behavioral task
behavioral1
Sample
de4bc405163cc6a5c85c7abf49f1d73a5f4c410fa9b0a1ac695e3d78408e737e.exe
Resource
win7-20230831-en
General
-
Target
de4bc405163cc6a5c85c7abf49f1d73a5f4c410fa9b0a1ac695e3d78408e737e
-
Size
1017KB
-
MD5
c087ec5040b9307df33a57602322a5e7
-
SHA1
beca8ff424a3cf053474397ccb34c3bbf4c84770
-
SHA256
de4bc405163cc6a5c85c7abf49f1d73a5f4c410fa9b0a1ac695e3d78408e737e
-
SHA512
5e0f4406f065752c5ac4dd493822451484b7108702a6b881abaafa7dbf5115bbc2f424ed32e2130c08762e1301d2b45127823fb43602efca5e9b8593c938f25f
-
SSDEEP
24576:m+wT1kfTw4SIuvB74fgt7ibhRM5QhKehFdMtRj7nH1PXwTX:lerL7Vwr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de4bc405163cc6a5c85c7abf49f1d73a5f4c410fa9b0a1ac695e3d78408e737e
Files
-
de4bc405163cc6a5c85c7abf49f1d73a5f4c410fa9b0a1ac695e3d78408e737e.exe windows:4 windows x86
5e0a0792d2594296eb53ee9831d05da1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord5683
ord4129
ord800
ord823
ord825
ord537
msvcrt
__set_app_type
_controlfp
__p__fmode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
strstr
_except_handler3
__CxxFrameHandler
_access
srand
rand
__p__commode
_mkdir
kernel32
WriteFile
CreateFileA
FreeLibrary
GetTickCount
GetLastError
GetFileAttributesA
GetStartupInfoA
GetModuleHandleA
ExpandEnvironmentStringsA
DeleteFileA
MoveFileExA
GetCommandLineA
LoadLibraryA
GetProcAddress
GetLocalTime
lstrcpyA
CloseHandle
user32
wsprintfA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 900KB - Virtual size: 900KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE