Static task
static1
Behavioral task
behavioral1
Sample
13ebaf0616150c8810af5b8bc6ea61b5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13ebaf0616150c8810af5b8bc6ea61b5.exe
Resource
win10v2004-20231215-en
General
-
Target
13ebaf0616150c8810af5b8bc6ea61b5
-
Size
40KB
-
MD5
13ebaf0616150c8810af5b8bc6ea61b5
-
SHA1
842c77abb09744a875764399b1bd45adb2c16851
-
SHA256
53a563bfd0031fb128855d29c0527a2efed54a06e63ef54d396527b8e355765e
-
SHA512
034a8fdd6c704bf7d4fa78e1b8dd138454a41b5c8ac609c67f79e4e22c6666b1533719b8f3bfec168f3bb44c40eb915b4ea3cb11b3f922f35f4d0e31c2fcdaa0
-
SSDEEP
768:P2UotB4Bdi8lSHCO1V63AMq6NhVX4nJGYeRoJHGpYz8djtlisOF5z:uUoD4Bs8lyV63AZ6z1kkYQoavtlitF5z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13ebaf0616150c8810af5b8bc6ea61b5
Files
-
13ebaf0616150c8810af5b8bc6ea61b5.exe windows:4 windows x86 arch:x86
cd128638ef5af026a6470a45a2757690
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
VirtualFree
CloseHandle
LocalUnlock
SetThreadLocale
SetFilePointer
GetFileType
OpenFileMappingA
GetStdHandle
GetSystemTime
WideCharToMultiByte
TlsGetValue
IsBadWritePtr
GlobalLock
TlsSetValue
ExitProcess
CreateFileA
WriteFile
SetEndOfFile
GetFileSize
lstrcatA
SetFileAttributesA
GetFileSize
GetShortPathNameA
GetFullPathNameA
SearchPathA
RemoveDirectoryA
lstrcpynA
GetModuleHandleA
lstrcpyA
GetModuleFileNameA
CopyFileA
lstrlenA
MoveFileA
advapi32
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
RegOpenKeyExA
RegCloseKey
user32
SendDlgItemMessageA
GetDlgItemTextA
CreateWindowExA
ShowWindow
SetWindowTextA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 24KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ