Static task
static1
Behavioral task
behavioral1
Sample
095a251af1d93eca5bb5171e3f5e1128.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
095a251af1d93eca5bb5171e3f5e1128.exe
Resource
win10v2004-20231215-en
General
-
Target
095a251af1d93eca5bb5171e3f5e1128
-
Size
26KB
-
MD5
095a251af1d93eca5bb5171e3f5e1128
-
SHA1
fc01ec0222a1f2c8e1d13f851f6d1a90a2484ee6
-
SHA256
e0062a3dc83d988ec38d1f1a6604f7a57a004aa05e2b3f487abc497c8b6e37a1
-
SHA512
d93f80ed0a48cc2458132e7417560fc636cca74f7b36afef4d9809015b2fe577c78acce50a8d0263ff7ca573cb819e7f50b3bfedbeaf0392af3b4a937cab46ea
-
SSDEEP
768:GchlDyR5CpXsL+5Tnr9CGHuLt5lyqHy9AlzXHqtlvwr:NhlD65xQTnfHuRi8y9A1+hwr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 095a251af1d93eca5bb5171e3f5e1128
Files
-
095a251af1d93eca5bb5171e3f5e1128.exe windows:4 windows x86 arch:x86
4d91545d2506f8687c6c8bc6011e227a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ArcTo
GetTextExtentPoint32A
GetViewportExtEx
GetFontData
GetLogColorSpaceA
DeleteDC
GetGlyphIndicesW
CreateFontA
kernel32
GetSystemDirectoryW
GetCommandLineW
ExitProcess
GetModuleHandleW
VirtualAlloc
CreateMailslotW
EnumResourceNamesW
SetLastError
SetConsoleScreenBufferSize
_llseek
GetCurrentProcessId
CopyFileA
RemoveDirectoryW
linkinfo
CompareLinkInfoVolumes
CompareLinkInfoReferents
IsValidLinkInfo
GetLinkInfoData
ResolveLinkInfoW
DestroyLinkInfo
CreateLinkInfoW
DisconnectLinkInfo
GetCanonicalPathInfoW
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.textbs Size: 5KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 92KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 96KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 96KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ