Static task
static1
Behavioral task
behavioral1
Sample
f70b25e6af6b59e52f5a338a04e3660b00fa71d45e670386d75698b8ee6b0e83.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f70b25e6af6b59e52f5a338a04e3660b00fa71d45e670386d75698b8ee6b0e83.exe
Resource
win10v2004-20231020-en
General
-
Target
f70b25e6af6b59e52f5a338a04e3660b00fa71d45e670386d75698b8ee6b0e83
-
Size
14KB
-
MD5
45c9eb3c78629177bf893bc610c723f6
-
SHA1
02a2d940645531a36da646da9fc709bb8159d246
-
SHA256
f70b25e6af6b59e52f5a338a04e3660b00fa71d45e670386d75698b8ee6b0e83
-
SHA512
41832311117d14a28bc147f98d6fcccae9a8fccc6fe71bb32557920b72e4fe26fce7a08726b39b114a2d23be3dbe295e14f766ed644bcc7f22208025317f121f
-
SSDEEP
192:qOcrEQ8XZGMxpJSwZCbP3TSEmZH46A3CzYWu58u51Yx/ghs3nnnnnn+:ZoELIeMNmXA3CzYd5r51YxIh3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f70b25e6af6b59e52f5a338a04e3660b00fa71d45e670386d75698b8ee6b0e83
Files
-
f70b25e6af6b59e52f5a338a04e3660b00fa71d45e670386d75698b8ee6b0e83.exe windows:4 windows x86
0492baea297996815693da7f4b834882
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetModuleFileNameA
DeleteFileA
CloseHandle
ReadFile
GetFileSize
CreateFileA
WriteFile
GetCommandLineA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleA
user32
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA
msvcrt
rand
strrchr
malloc
realloc
_ftol
free
shlwapi
PathFileExistsA
shell32
ShellExecuteA
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 934B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ