Static task
static1
Behavioral task
behavioral1
Sample
1891f200eb1c30894a9bf9709b823323.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1891f200eb1c30894a9bf9709b823323.exe
Resource
win10v2004-20231215-en
General
-
Target
1891f200eb1c30894a9bf9709b823323
-
Size
176KB
-
MD5
1891f200eb1c30894a9bf9709b823323
-
SHA1
122c78eaa05349eef6f5eede4f67cb1f3daa1cdc
-
SHA256
377299852e9a622d8085e99c34d019d2e5dea7f14622092263c2d6390b73325c
-
SHA512
873d2e6320f5be05433202afcf9ebf1471b7b47672e588f04e22f1bb2cc3e70823398bcc8f6565c7112dfd28d475350814d6373d5257e96c36e840a012819b75
-
SSDEEP
3072:tzitLafiaJY7FqK1nx2dJ2dU1qTHlFhenViE:tGtOfrJY7Fq0AzARFhw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1891f200eb1c30894a9bf9709b823323
Files
-
1891f200eb1c30894a9bf9709b823323.exe windows:4 windows x86 arch:x86
339719a5f424d52f64b792eecd6eac4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateProcessW
Sleep
GetTickCount
CopyFileW
RemoveDirectoryW
FlushFileBuffers
CreateEventW
GetTempFileNameA
GetVersion
LocalAlloc
LocalFree
DeviceIoControl
WaitForSingleObject
GetCurrentProcess
GetTempPathW
LoadLibraryW
HeapValidate
HeapCompact
HeapAlloc
HeapCreate
HeapFree
DeleteFileW
CreateDirectoryA
ResetEvent
WaitForMultipleObjects
VirtualFree
VirtualProtect
VirtualAlloc
GetCommandLineA
GetModuleHandleA
GetCurrentThreadId
MoveFileW
GetStartupInfoA
msvcr71
fclose
fwrite
fputs
fseek
fopen
exit
realloc
free
malloc
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
_acmdln
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
atoi
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ