Static task
static1
Behavioral task
behavioral1
Sample
81a16156ca94d496ea3f0d759a1a2710_exe32.exe
Resource
win7-20230831-en
General
-
Target
81a16156ca94d496ea3f0d759a1a2710_exe32.exe
-
Size
118KB
-
MD5
81a16156ca94d496ea3f0d759a1a2710
-
SHA1
81fdb897d88ec7ee48fa37c743513c296332d34c
-
SHA256
8701b13c0c696f8c8780d1bda117ed7e8665f447e06e4547f3baa84452ddeebf
-
SHA512
6d1c09c1af26b40e8230c15181405e3b437db54902f323d381ebf1596b0e856466b46222bad5d0c174a4d8c8509b1f5e644d92d5564e6a4068db82f0ffe6e82d
-
SSDEEP
1536:+wycPRhTWVyMl42vO9GSmh4WVNujvom8HB1aom2WmTP0z5U6S3flsu3TDAS:+DWRRHMl9vObmKT18HB1q80zC6S3flsi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81a16156ca94d496ea3f0d759a1a2710_exe32.exe
Files
-
81a16156ca94d496ea3f0d759a1a2710_exe32.exe.exe windows:4 windows x86
7fbd21c6886b55f97e783da8bec8fe5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
Sleep
lstrlenA
lstrcpynA
lstrcmpiA
GetPrivateProfileStringA
lstrcpyA
lstrcatA
FlushFileBuffers
LCMapStringW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
HeapAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
LCMapStringA
CloseHandle
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
shell32
ShellExecuteA
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE