Static task
static1
Behavioral task
behavioral1
Sample
081ac3c95a55b462fde95151547bc9ec.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
081ac3c95a55b462fde95151547bc9ec.exe
Resource
win10v2004-20231215-en
General
-
Target
081ac3c95a55b462fde95151547bc9ec
-
Size
3.4MB
-
MD5
081ac3c95a55b462fde95151547bc9ec
-
SHA1
ee6c17d295c71a762a65aa57d1ed0b7648f6b9a8
-
SHA256
56e82a1770296d532aa75c742fa2f56a71c8aa28a090d1e488115333bf1fe875
-
SHA512
76cf87429a62e420955348d6ed77dd8d1ba38160eeb82b150de7a32e2d84219f3479841120ecc0a6ff6fa3908f57d7aa58abcb1fad949c7ebf4d6076bf8eb9d3
-
SSDEEP
98304:cyyzR5TosdLBk7nBeu1ia3Has+B7Swn+MWevjGptj:cyiR+sRBABFiA6s+B3jvj+j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 081ac3c95a55b462fde95151547bc9ec
Files
-
081ac3c95a55b462fde95151547bc9ec.exe windows:4 windows x86 arch:x86
2c0249c1d2b25ba1b4254a332036f416
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleW
QueryPerformanceCounter
CloseHandle
WideCharToMultiByte
SetLastError
HeapFree
LocalFree
WaitForSingleObject
CreateFileW
IsDebuggerPresent
GetACP
FormatMessageW
GetFileType
GetModuleHandleA
InitializeCriticalSection
HeapReAlloc
HeapSetInformation
WriteConsoleW
LoadLibraryW
LoadLibraryExW
CreateThread
SetFilePointer
GetStringTypeW
RtlUnwind
LCMapStringW
GetOEMCP
IsProcessorFeaturePresent
IsValidCodePage
FindFirstFileW
GetConsoleCP
LocalAlloc
GetCommandLineA
ResetEvent
GetVersionExW
GetFileSize
VirtualFree
GetLocaleInfoW
CreateDirectoryW
ExpandEnvironmentStringsW
CreateProcessW
user32
TranslateMessage
ShowWindow
DestroyWindow
DefWindowProcW
GetDC
GetWindowRect
PostMessageW
SendMessageW
GetClientRect
EnableWindow
IsWindow
GetParent
EndDialog
EndPaint
EnableMenuItem
GetWindow
GetWindowTextW
UpdateWindow
SystemParametersInfoW
GetKeyState
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 612KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE