Static task
static1
Behavioral task
behavioral1
Sample
0d55437acf8150a2e7e6e57056fdb003.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d55437acf8150a2e7e6e57056fdb003.exe
Resource
win10v2004-20231215-en
General
-
Target
0d55437acf8150a2e7e6e57056fdb003
-
Size
48KB
-
MD5
0d55437acf8150a2e7e6e57056fdb003
-
SHA1
a3710d0c489367161abca16da2645e6c916f7b99
-
SHA256
79fbbed0edf33d79f2790fafa2623c4d9de1fec266ab6717b014f6e365da976d
-
SHA512
4fd16d8fbe956b60b8a73d2a9f1b0188a278acd4512be1ab83e617b60ebf0d699664eec0dfe5cdc9025ed56c2bf9456aa363e8aa323481c3841035ff8c7ca056
-
SSDEEP
768:bELvwUN4Z3ZgvpJ6MdKwSLPWLx3DhC7IKJ/o1JfLvmTN7gkl0OdatsWVf7Shz:bELG3ZghJxKm3Dh4/o1Jfs7gkZatsgD0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d55437acf8150a2e7e6e57056fdb003
Files
-
0d55437acf8150a2e7e6e57056fdb003.exe windows:5 windows x86 arch:x86
133bf210b337ad25c63f8fc754780bc6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetModuleHandleA
GetPrivateProfileStringA
QueryPerformanceCounter
HeapAlloc
GetStartupInfoA
GetStdHandle
ExitProcess
UnhandledExceptionFilter
GetPrivateProfileStringW
LocalAlloc
GetLastError
RaiseException
GetConsoleOutputCP
GetCurrentProcess
GetFullPathNameW
LCMapStringA
GetCurrentProcessId
GetSystemDirectoryW
Sleep
EnterCriticalSection
ReleaseSemaphore
InitializeCriticalSection
GetACP
SetConsoleCP
RtlUnwind
DeviceIoControl
GetSystemTime
GetVersion
FindResourceW
WriteConsoleW
VirtualProtect
GetOEMCP
CloseHandle
GetTickCount
SetStdHandle
GetLocalTime
msvcrt
__setusermatherr
_vsnwprintf
memcpy
strchr
_fileno
user32
SetWindowLongW
MessageBeep
GetSystemMenu
SendMessageW
SetWindowPos
MessageBoxA
IsDialogMessageW
SetActiveWindow
SetWindowTextW
IsWindowVisible
MsgWaitForMultipleObjects
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE