Static task
static1
Behavioral task
behavioral1
Sample
14c19ee9d4ccdb9e584607ba0b72757b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14c19ee9d4ccdb9e584607ba0b72757b.exe
Resource
win10v2004-20231222-en
General
-
Target
14c19ee9d4ccdb9e584607ba0b72757b
-
Size
92KB
-
MD5
14c19ee9d4ccdb9e584607ba0b72757b
-
SHA1
ded0f23284f978a8edb4dd5d10c1adc74f02cb7a
-
SHA256
e7d8de85b2982d2ee89e7a9c2e176a86638c6c05881f5fbdf6ab0d900ade3592
-
SHA512
247bb3bc8c463d39ab99f7110d211f59c45e9697c13a83a96078c71b12906b4f42668e81bf0971569bd3bd319062a010cf701fb879eada5f6fcc2a10f91f5305
-
SSDEEP
1536:M+aEBk5Ccgc7S0uDvjp5IUJt2UhpaeaypT78koXoY:M+auncv7S0IpVtFTFp7joXoY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14c19ee9d4ccdb9e584607ba0b72757b
Files
-
14c19ee9d4ccdb9e584607ba0b72757b.exe windows:4 windows x86 arch:x86
2b3017f12929e76f913c6d9c6c9f893f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
GlobalLock
GlobalAlloc
GetTickCount
Sleep
GetLocaleInfoW
SetEnvironmentVariableA
SetStdHandle
ReadFile
LoadLibraryA
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetStringTypeW
GetStringTypeA
GetVersionExA
GetUserDefaultLCID
LocalFree
MultiByteToWideChar
WideCharToMultiByte
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
HeapSize
GetLastError
GetFileAttributesA
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
VirtualAlloc
IsBadWritePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
user32
SetForegroundWindow
SetFocus
CloseClipboard
keybd_event
VkKeyScanA
OpenClipboard
EmptyClipboard
SetClipboardData
ShowWindow
ole32
CoInitialize
CoCreateInstance
CoUninitialize
oleaut32
VariantInit
VariantClear
SysAllocString
Sections
.data Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE