Static task
static1
Behavioral task
behavioral1
Sample
d28ff6cd25e4a68ab466ad6fe6ff88cd992c015e28e419b4e000a1e97c26f0a0.exe
Resource
win7-20231020-en
General
-
Target
d28ff6cd25e4a68ab466ad6fe6ff88cd992c015e28e419b4e000a1e97c26f0a0
-
Size
1.0MB
-
MD5
9aa30908a85442341ecc15a60fc49b32
-
SHA1
356c2b538577ad9324996dbcf4281c8b82fb49e7
-
SHA256
d28ff6cd25e4a68ab466ad6fe6ff88cd992c015e28e419b4e000a1e97c26f0a0
-
SHA512
46f0865eb3ce1d3430bc88578577cc5834f73455d0d8847711cbffb0d4c2eb8bf8da143fd9928fcac0ad29b18693069afc62912b251ee34b43a9b04a1c8a1895
-
SSDEEP
24576:JH0OUNb5Yx6Dr8qpVcFunmiPwqpVcFunmiP5:JUOkb5YQfRQybP1QybP5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d28ff6cd25e4a68ab466ad6fe6ff88cd992c015e28e419b4e000a1e97c26f0a0
Files
-
d28ff6cd25e4a68ab466ad6fe6ff88cd992c015e28e419b4e000a1e97c26f0a0.exe windows:4 windows x86
964105fb49c4ae55168659d10d45916e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapReAlloc
GetProcessHeap
HeapFree
VirtualFree
FreeLibrary
VirtualAlloc
VirtualProtect
GetProcAddress
LoadLibraryA
ExitProcess
Sleep
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
IsBadWritePtr
IsBadReadPtr
HeapValidate
IsBadCodePtr
GetLastError
SetConsoleCtrlHandler
GetCPInfo
GetACP
GetOEMCP
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle
Sections
.text Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 337KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 268KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ