Static task
static1
Behavioral task
behavioral1
Sample
13c808028c5df0307bb67968d82ec098.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13c808028c5df0307bb67968d82ec098.exe
Resource
win10v2004-20231215-en
General
-
Target
13c808028c5df0307bb67968d82ec098
-
Size
88KB
-
MD5
13c808028c5df0307bb67968d82ec098
-
SHA1
9184e4ce8ff4c33ad8e9e90fd75c5f788fb3f9b6
-
SHA256
62d9ea5392d49393d494aab8e0727120a3efbc33e9a72e6b6252579b21bc8a7c
-
SHA512
8d5627042f2157fa4432b4926a5eaf2791193a8626b329eb3cc4fbe67c321efc54041454755fe074c177e50daf0cf33f643ce2efafe187d3de5fbe481e2ab533
-
SSDEEP
1536:lmyzDCCdVuUB24Ngwy6SogaaQg21z+naiK8l:lXDCCuS24NfyogaaQd1zJU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13c808028c5df0307bb67968d82ec098
Files
-
13c808028c5df0307bb67968d82ec098.exe windows:4 windows x86 arch:x86
28205965f611d60870f94b4a24a90b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
FreeConsole
IsBadReadPtr
IsBadCodePtr
GetCommandLineA
GetDateFormatA
SetLastError
VirtualProtect
EnumResourceTypesA
GetLastError
GetDriveTypeA
FindClose
Sleep
GetModuleHandleA
GetDiskFreeSpaceExW
LoadLibraryExA
DeleteCriticalSection
GetTickCount
CloseHandle
TlsGetValue
shell32
DragFinish
DragAcceptFiles
SHFree
DllUnregisterServer
SHGetDiskFreeSpaceA
SHGetSettings
ExtractIconA
ShellMessageBoxA
StrChrA
SHGetMalloc
DragQueryFileA
DuplicateIcon
ShellAboutA
printui
bFolderGetPrinter
bPrinterSetup
vQueueCreate
vPrinterPropPages
PnPInterface
advapi32
RegCloseKey
Sections
.text Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
owqtugy Size: - Virtual size: 6KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE