Static task
static1
Behavioral task
behavioral1
Sample
appidtel.exe
Resource
win10v2004-20231020-en
General
-
Target
appidtel.exe
-
Size
44KB
-
MD5
6c9061a9a2b3ce57278e437ac824f7e0
-
SHA1
7cc3af57a4abc926d958a988e5bbe0e1439dfe79
-
SHA256
dc05878ca61b99fc2996c70aae14c35f6ac91792fbbbaeb82724afaa01ad0795
-
SHA512
c49675a9d2dba55e38f6281b2b8790e4caf7b83950810d56d55d9a4a595cddbd795225c22921ae760ed7128c1f7c284aa49aebb7fea627a43dfa1a0ad6d5627c
-
SSDEEP
384:uvS6mrDXWIiQSdHQCpOnoZGrpfeveKUNJaAl2R58ziwczzykoP2dRb4sWsdsWOv:u0edYrr9eveKUeAl05AiwcHS2dR0C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource appidtel.exe
Files
-
appidtel.exe.exe windows:10 windows x64 arch:x64
ee8cadc7162a0f5d13ed90f25bbd2d68
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
msvcrt
_exit
_cexit
__setusermatherr
_initterm
_fmode
exit
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
memmove
memcpy
__CxxFrameHandler3
_CxxThrowException
?what@exception@@UEBAPEBDXZ
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
_callnewh
malloc
__C_specific_handler
_wtoi64
_purecall
??3@YAXPEAX@Z
_wcsicmp
_commode
__CxxFrameHandler4
ntdll
RtlCaptureContext
NtQuerySystemTime
RtlLookupFunctionEntry
RtlVirtualUnwind
advapi32
RegCloseKey
ChangeServiceConfigW
RegCreateKeyW
StartServiceW
RegSetValueExW
ControlService
OpenSCManagerW
CloseServiceHandle
OpenServiceW
kernel32
GetLastError
Sleep
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 440B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ