Static task
static1
Behavioral task
behavioral1
Sample
113f24f9226dd37da545ae6c850fdc51.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
113f24f9226dd37da545ae6c850fdc51.exe
Resource
win10v2004-20231215-en
General
-
Target
113f24f9226dd37da545ae6c850fdc51
-
Size
179KB
-
MD5
113f24f9226dd37da545ae6c850fdc51
-
SHA1
ef1f00e839fd4bbaef72127c6a4e2a2381a79d83
-
SHA256
63073b1507265c225865e4ba0b49ae5ac4152ff113cd72e8f461d8776e50190f
-
SHA512
bd06f03f44e747427d8f9b924726346b7631c1c5a75745515bf960603d8628671021611bc04fcba1384c577d5a1802faca03e89132fcbd01896b436fba237277
-
SSDEEP
3072:koY5STOmxQxxrJzT5MwLywlkOIyYozmU+2AU7kD+jOTBQtQ2DtoHOsbPqb0B45dt:ekn8T1lt/DzjnAU7ki9pSqldt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 113f24f9226dd37da545ae6c850fdc51
Files
-
113f24f9226dd37da545ae6c850fdc51.exe windows:4 windows x86 arch:x86
a050555e2ad4eec836a79f537060195f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
InterlockedExchange
VirtualQuery
FlushFileBuffers
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
CloseHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE