Static task
static1
Behavioral task
behavioral1
Sample
a1ca5124b9f2265d93edd5ad24bcf53e5016dd43ece7110a385403129401b1f2.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
a1ca5124b9f2265d93edd5ad24bcf53e5016dd43ece7110a385403129401b1f2.exe
Resource
win10v2004-20231023-en
General
-
Target
a1ca5124b9f2265d93edd5ad24bcf53e5016dd43ece7110a385403129401b1f2
-
Size
164KB
-
MD5
6f2f113a2cb5fed226e400cced929c8e
-
SHA1
c8e438b7215c84a3fd28e9999c2a75be2b2f4ee2
-
SHA256
a1ca5124b9f2265d93edd5ad24bcf53e5016dd43ece7110a385403129401b1f2
-
SHA512
587fc947001542c14b518a5d51cf59fdf401a44ed542fcac282f94884345143d9f850ed1b9bd95b7d2bdcc87efd7936326b732d6f8bfd771f3acf474cb0ca8ff
-
SSDEEP
3072:x0Rzi+05EcAL+zUWPSfx8o6Rop05NBpBqArOyLEPgm+:x0R4SjyUwC8TN1qeOyLEPI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1ca5124b9f2265d93edd5ad24bcf53e5016dd43ece7110a385403129401b1f2
Files
-
a1ca5124b9f2265d93edd5ad24bcf53e5016dd43ece7110a385403129401b1f2.exe windows:4 windows x86
a3241c14b0acf73f27c8267a2a95ba11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc80
ord930
ord934
ord2390
ord2410
ord2394
ord2400
ord2398
ord2396
ord2413
ord2408
ord2392
ord2415
ord2403
ord2385
ord2387
ord2405
ord2178
ord2862
ord2172
ord1522
ord6279
ord3802
ord6277
ord3345
ord4967
ord1362
ord5175
ord1964
ord1614
ord1656
ord1655
ord5200
ord572
ord3596
ord762
ord2838
ord4481
ord4038
ord3683
ord757
ord4014
ord5226
ord4568
ord5566
ord2248
ord3830
ord4541
ord6278
ord3801
ord6276
ord4326
ord2063
ord2018
ord5583
ord3806
ord1010
ord5102
ord6219
ord5382
ord3832
ord5975
ord566
ord3333
ord1054
ord1920
ord2931
ord5224
ord3948
ord5230
ord5213
ord2020
ord715
ord578
ord1793
ord2322
ord3605
ord3088
ord2021
ord630
ord385
ord265
ord1794
ord709
ord501
ord266
ord629
ord1439
ord2308
ord6288
ord5323
ord932
ord5089
ord384
ord3641
ord4749
ord5182
ord6724
ord5912
ord1401
ord4262
ord5203
ord605
ord4212
ord4735
ord4890
ord4580
ord1671
ord1670
ord1551
ord354
ord3182
ord1084
ord1643
ord1581
ord3292
ord2371
ord1881
ord1892
ord1063
ord1903
ord5946
ord3908
ord6236
ord4104
ord3348
ord6090
ord5613
ord4125
ord6067
ord2657
ord1599
ord1482
ord6703
ord299
ord1489
ord4035
ord4109
ord2272
ord911
ord907
ord784
ord781
ord304
ord297
ord310
ord2469
ord620
ord3195
ord3441
ord730
ord3304
ord4237
ord657
ord1397
ord6266
ord1933
ord1484
ord4099
ord2091
ord1570
ord3229
ord4234
ord591
ord1931
ord1483
ord4098
ord2089
ord1547
ord3171
ord3761
ord5059
ord5985
ord5622
ord1207
ord928
ord923
ord5233
ord5235
ord5960
ord1600
ord4282
ord4722
ord3403
ord5214
ord4185
ord6275
ord5073
ord1908
ord5152
ord4244
ord760
ord1402
ord3946
ord4486
ord1617
ord1620
ord5915
ord6725
ord2991
ord4261
ord3949
ord2644
ord3709
ord3719
ord3718
ord2533
ord2646
ord2540
ord2714
ord4307
ord2835
ord2731
ord2537
ord2903
ord764
msvcr80
_setmbcp
malloc
free
memcpy
_CxxThrowException
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
sscanf
_invalid_parameter_noinfo
?what@exception@std@@UBEPBDXZ
printf
memset
sprintf
_mbsrchr
memmove_s
_purecall
sprintf_s
strpbrk
__CxxFrameHandler3
_unlock
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_controlfp_s
_invoke_watson
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
kernel32
InterlockedExchange
GetLocalTime
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleFileNameA
Sleep
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
user32
GetSystemMenu
GetWindowRect
LoadIconA
DrawIcon
GetClientRect
SendMessageA
AppendMenuA
PostMessageA
GetSystemMetrics
IsWindowVisible
EnableWindow
IsIconic
comctl32
InitCommonControlsEx
oleaut32
SafeArrayGetUBound
SafeArrayUnaccessData
VariantInit
SafeArrayCreate
SafeArrayAccessData
SafeArrayGetLBound
VariantClear
msvcp80
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?uncaught_exception@std@@YA_NXZ
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
Sections
.text Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ