Static task
static1
Behavioral task
behavioral1
Sample
1ebc0bc6e88c2f8ae455a8c250a87093.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1ebc0bc6e88c2f8ae455a8c250a87093.exe
Resource
win10v2004-20231215-en
General
-
Target
1ebc0bc6e88c2f8ae455a8c250a87093
-
Size
548KB
-
MD5
1ebc0bc6e88c2f8ae455a8c250a87093
-
SHA1
cee7806eee5d4e6dbf4a04f099e8994b23118349
-
SHA256
2f42e126439842a833e37d5ac5a925975aeb2d9f2d39eb3579dd25d7eabf9b58
-
SHA512
a104f47befc39aab32e431febe5393267229def0143915f52385f913e6303582641e40e165cdecaa97334ca356567388fd1372ad036e83fc94bc48ae40416709
-
SSDEEP
12288:ffg2HEh0MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMM+MMMMMMMMMMMMMMMMMMMMMW:Q2tMMMMMMMMMMMMMMMMMMMMMMMMMMMM5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 1ebc0bc6e88c2f8ae455a8c250a87093
Files
-
1ebc0bc6e88c2f8ae455a8c250a87093.exe windows:6 windows x86 arch:x86
fb3173a5f2fac421132f53c478a667b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
atoi
_XcptFilter
__set_app_type
_except_handler3
_exit
_controlfp
__dllonexit
_onexit
free
fwrite
rand
_wtoi
strcspn
malloc
fread
__p__fmode
atof
rewind
system
fseek
memcpy
remove
fclose
fopen
__p__commode
ftell
winmm
PlaySoundW
kernel32
lstrcmpW
LocalFree
GetCommandLineW
VirtualProtect
GetModuleHandleA
GetStartupInfoA
shell32
CommandLineToArgvW
SHGetFolderPathW
user32
SetWindowPos
GetWindowRect
GetWindowTextLengthW
GrayStringA
GetDC
LoadImageW
PostQuitMessage
SetWindowLongW
wsprintfW
SetFocus
IsWindow
ShowWindow
GetSystemMetrics
SendMessageW
LoadImageA
GetSysColorBrush
LoadCursorW
TranslateMessage
RegisterClassW
DispatchMessageW
GetMessageW
RedrawWindow
GetClientRect
DrawTextW
InvalidateRect
GetWindowTextW
DefWindowProcW
FillRect
SetWindowTextW
MapWindowPoints
CreateWindowExW
gdi32
CreateSolidBrush
SetBkMode
SetTextColor
SelectObject
BitBlt
SetBkColor
GetStockObject
CreateFontW
CreateCompatibleDC
GetObjectW
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ