Static task
static1
Behavioral task
behavioral1
Sample
023d580faccc0741ea634b65b9d293fd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
023d580faccc0741ea634b65b9d293fd.exe
Resource
win10v2004-20231215-en
General
-
Target
023d580faccc0741ea634b65b9d293fd
-
Size
20KB
-
MD5
023d580faccc0741ea634b65b9d293fd
-
SHA1
827fdca6449d2455920381e3b680779a790460b0
-
SHA256
12f375c8bc4853a3d8790b7b1d4c2b105e586caa0e54ea6fbdb37be1a2654ff3
-
SHA512
cd056a6c48197f5ec2dbccf4945eaca7283df88d252902443bf4bba7f1fd19fabb9600b633a0dd7a8ef5477542dc14168130516da5d50cec0134f0a17ffbe022
-
SSDEEP
384:HlFJ8SVmcgWPTEChmhKGERHDUE6NFmX0l2zl2HAfUPASSX:3KmhgWA+DUpX60l+MSX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 023d580faccc0741ea634b65b9d293fd
Files
-
023d580faccc0741ea634b65b9d293fd.exe windows:4 windows x86 arch:x86
0c8bccc9e77b540df5fadcbe963cbaeb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
GetNumberOfConsoleInputEvents
GetVersionExA
ReadConsoleInputA
ScrollConsoleScreenBufferA
WriteConsoleOutputA
CreateFileA
Sleep
GetStdHandle
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress
user32
MessageBoxA
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ