Static task
static1
Behavioral task
behavioral1
Sample
946cdb205a6cea7c7b3992daa8281e6044dab58759465e12d21c438dfae81364.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
946cdb205a6cea7c7b3992daa8281e6044dab58759465e12d21c438dfae81364.exe
Resource
win10v2004-20231023-en
General
-
Target
946cdb205a6cea7c7b3992daa8281e6044dab58759465e12d21c438dfae81364
-
Size
52KB
-
MD5
16e70ce4d1a92efd44e14f9716d97003
-
SHA1
515329157d579090234725efc08576875198307a
-
SHA256
946cdb205a6cea7c7b3992daa8281e6044dab58759465e12d21c438dfae81364
-
SHA512
b2e7b6c23c520c24f4708c3ea4b5763667893c2490fa011b2f16455513828a1a3416dfa69d6c59bdc4b9f770ca70f2b4a406e4bc4ef3a581f593eed5af5db600
-
SSDEEP
768:/2jdPrTS0GSWX5HzorDM8eolieolnToeeol3UZq5eStiFMN:/2dPrTSbSCorDCOHOUzO3P5Tt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 946cdb205a6cea7c7b3992daa8281e6044dab58759465e12d21c438dfae81364
Files
-
946cdb205a6cea7c7b3992daa8281e6044dab58759465e12d21c438dfae81364.exe windows:4 windows x86 arch:x86
26f6dfe13863a2290d88d7a8c592f4cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
GetCurrentThreadId
CreateProcessA
OutputDebugStringA
WaitForSingleObject
GetProcAddress
LoadLibraryA
FreeLibrary
Process32Next
OpenProcess
TerminateProcess
Process32First
CreateToolhelp32Snapshot
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetLastError
ResumeThread
CreateThread
TlsSetValue
ExitThread
CloseHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TlsAlloc
SetLastError
TlsGetValue
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetStringTypeW
user32
LoadStringA
GetMessageA
MessageBoxA
PostThreadMessageA
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE