Static task
static1
Behavioral task
behavioral1
Sample
039ce61ad976fdb44b6e4a5c63523f88.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
039ce61ad976fdb44b6e4a5c63523f88.exe
Resource
win10v2004-20231222-en
General
-
Target
039ce61ad976fdb44b6e4a5c63523f88
-
Size
128KB
-
MD5
039ce61ad976fdb44b6e4a5c63523f88
-
SHA1
3efb64be83c2f99ad040e0cb62f2fbebb6cc8465
-
SHA256
661fa2df3e85bc624a34ad463537fb059fe4d3bb268d60d83c1e7d27f5ed661d
-
SHA512
f2fb61c9f4c1102138f7545d7843cc388f681832310e489a19bea5a4470f7a64a6e17855c9c9d82e01fbdafc1de65420aee44baf71b10028cff21657b4fe3dbe
-
SSDEEP
3072:yDtzFbaCA51Mh8qSiKxMEVFk4RrOo6TKYE4JQcrjv0:aBdaZ5PpPl9oE4JQwY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 039ce61ad976fdb44b6e4a5c63523f88
Files
-
039ce61ad976fdb44b6e4a5c63523f88.exe windows:4 windows x86 arch:x86
900484562eac952acb54c01e40db8af1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
lstrlenA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetModuleHandleA
ExitProcess
GetSystemTimeAsFileTime
user32
wsprintfA
msvcr71
_except_handler3
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
_acmdln
__security_error_handler
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_controlfp
??3@YAXPAX@Z
atoi
malloc
free
memset
_amsg_exit
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE