Static task
static1
Behavioral task
behavioral1
Sample
12a50324f654360558328c13547cb7f3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
12a50324f654360558328c13547cb7f3.exe
Resource
win10v2004-20231222-en
General
-
Target
12a50324f654360558328c13547cb7f3
-
Size
100KB
-
MD5
12a50324f654360558328c13547cb7f3
-
SHA1
38742158cde81e806231ca590044bcc7f60d3c84
-
SHA256
38b601de5c9c9a783162648095acbd90a0d6281ff47dbef05445a58e36d44951
-
SHA512
a3a7cbfc2e340a426ac71fba759933e5f7375a110bda3b0ca7ed4ec210e6cbcf50edaf89461c1e3c4d0509dbd8ff380cd2b3d643b8353ce235af339d07818890
-
SSDEEP
1536:VkFPmefrQ+KBuXskV48MWMbb7U9LvvYur/UVoMGN:VqPb0NBuXd4tPQFHbUVoMGN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12a50324f654360558328c13547cb7f3
Files
-
12a50324f654360558328c13547cb7f3.exe windows:4 windows x86 arch:x86
9ae1073fd61806c49c6abf1cd5390908
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetCurrentProcessId
GetCurrentThreadId
MultiByteToWideChar
GetThreadPriority
CreateThread
HeapAlloc
GetProcessHeap
OpenProcess
HeapFree
SetLastError
GetProcAddress
CreateFileA
GetComputerNameA
GetFileAttributesA
Process32First
CreateToolhelp32Snapshot
GetSystemDefaultLCID
LoadLibraryA
GetModuleHandleA
CloseHandle
GetOEMCP
GetACP
GetCPInfo
SetStdHandle
IsBadCodePtr
IsBadReadPtr
LCMapStringW
GetTempPathA
FindFirstFileA
GetLastError
GetCurrentProcess
FindClose
GetCurrentThread
GetTickCount
Process32Next
SetErrorMode
LCMapStringA
GetStringTypeW
Sleep
RtlUnwind
GetCommandLineA
GetVersion
ExitProcess
RaiseException
TerminateProcess
HeapReAlloc
HeapSize
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
FlushFileBuffers
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
GetStringTypeA
SetEndOfFile
user32
GetMessageA
GetDesktopWindow
GetForegroundWindow
GetClassLongA
GetWindow
GetWindowRect
GetWindowLongA
advapi32
SetServiceStatus
StartServiceA
ControlService
DeleteService
CreateServiceA
CloseServiceHandle
OpenSCManagerW
OpenProcessToken
shell32
ShellExecuteExW
Sections
.text Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ