GetYourOpinion
Static task
static1
Behavioral task
behavioral1
Sample
95fbc388f899f5e65ab464a7c59a57617ba0ad3a00f601dbf6abeaf1ebabab4b.exe
Resource
win10v2004-20231020-en
General
-
Target
95fbc388f899f5e65ab464a7c59a57617ba0ad3a00f601dbf6abeaf1ebabab4b
-
Size
268KB
-
MD5
d4ae60baf60f563067ad77121f1c80c5
-
SHA1
cc3b29647a098805c86d087f0ca52c9fbeefc3d3
-
SHA256
95fbc388f899f5e65ab464a7c59a57617ba0ad3a00f601dbf6abeaf1ebabab4b
-
SHA512
4573f30ce017b1139f8f420d8ab5a49627879a82d6bac5b042579728184413d41a8ed66f9fbc432d87ab96190edcf4dc166a1f98bd6081b6c22140ed56d2bff0
-
SSDEEP
3072:rATQzmCVNkExINWYLi9b3gxc65daXb5rBBNLZJoe1VZ26RZMTFAWN68eAg0FujJk:jtusYxxcge5rLNLF26rTAOw9rdRR5Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95fbc388f899f5e65ab464a7c59a57617ba0ad3a00f601dbf6abeaf1ebabab4b
Files
-
95fbc388f899f5e65ab464a7c59a57617ba0ad3a00f601dbf6abeaf1ebabab4b.exe windows:6 windows x86
b846db3f652f2a36d937d37b9ecdc306
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsMouseInPointerEnabled
kernel32
TerminateProcess
CreateFileW
GetModuleHandleW
GetProcAddress
CloseHandle
WaitForSingleObjectEx
GetCurrentThreadId
GetExitCodeThread
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
QueryPerformanceCounter
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
WriteConsoleW
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
HeapSize
RaiseException
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
Exports
Exports
Sections
.text Size: 167KB - Virtual size: 166KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ