Static task
static1
Behavioral task
behavioral1
Sample
115278c815c34e71bece6ee892f25285.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
115278c815c34e71bece6ee892f25285.exe
Resource
win10v2004-20231215-en
General
-
Target
115278c815c34e71bece6ee892f25285
-
Size
452KB
-
MD5
115278c815c34e71bece6ee892f25285
-
SHA1
902bb8059c169857a1f9d9f868a9c4a5cf953d0a
-
SHA256
9a92859cb90943d067703acac6d53b8b5ff094a79eff66d0b9961546f30b75b2
-
SHA512
5a456e73266a6bb316f5b21cf402d1203b0b02ce70ef451c0e6ba2e718b72d790f4b629922e31e9da063acacca39eacbf12681709a6a0d04161a6584870bf5c8
-
SSDEEP
12288:B0ZRmf33hzczve0E948NddBDZRzfbDeDHoG2wHl:ePm/3STv8NL1rQH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 115278c815c34e71bece6ee892f25285
Files
-
115278c815c34e71bece6ee892f25285.exe windows:4 windows x86 arch:x86
80d7df96dd1be76f6055085a58b85b3b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
GetDriveTypeA
SetLastError
CloseHandle
HeapFree
HeapCreate
SuspendThread
GetFileType
SetStdHandle
WriteFile
CreateDirectoryA
CreateSemaphoreW
IsBadWritePtr
RemoveDirectoryA
ResumeThread
GetCommandLineA
CreatePipe
GetModuleHandleA
SetVolumeLabelA
GetVersion
FindAtomA
CreateThread
GetModuleFileNameA
ExitThread
FindClose
uxtheme
CloseThemeData
GetThemeTextExtent
DrawThemeBackground
GetThemeColor
GetWindowTheme
GetThemeBool
DrawThemeEdge
SetWindowTheme
CloseThemeData
OpenThemeData
GetThemeTextMetrics
GetThemeSysSize
IsThemeActive
perfdisk
CloseDiskObject
CloseDiskObject
CloseDiskObject
CloseDiskObject
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 443KB - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE