Static task
static1
Behavioral task
behavioral1
Sample
0d1c53aa825a5a8e8a22265d7cf37304.exe
Resource
win7-20231215-en
General
-
Target
0d1c53aa825a5a8e8a22265d7cf37304
-
Size
283KB
-
MD5
0d1c53aa825a5a8e8a22265d7cf37304
-
SHA1
52168ece549e3d1e120be0223c33049c53c3bd47
-
SHA256
3b7cf5764f4bf5a73e78f77e78e14ffa8d31a4193e776f186074d0345dad6822
-
SHA512
1394082be89a35cef9789262e46a2281b7cc61d6b17c5c184f9cd181050adc3835e34c05d26cd87f8433cdd20675c29c30d0eb382377e69670d9e030f96f3fba
-
SSDEEP
6144:+3lmZYHtWMKvxukxLrgSqGswQ9gDpsiMYU2p1nuaSND:WlEYMf8kd0SGiMYboLB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d1c53aa825a5a8e8a22265d7cf37304
Files
-
0d1c53aa825a5a8e8a22265d7cf37304.exe windows:4 windows x86 arch:x86
6593d923fa8252dc220235670d4415f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
AddAtomA
InitializeCriticalSection
LeaveCriticalSection
lstrcpyA
FreeLibrary
SetStdHandle
lstrcmpA
GetCPInfo
GetCurrentThreadId
FindFirstFileA
UnhandledExceptionFilter
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoA
SetUnhandledExceptionFilter
GetProcAddress
GetStringTypeW
GetFileAttributesA
FlushFileBuffers
IsBadCodePtr
Sleep
GetStringTypeA
GetModuleHandleA
DeleteCriticalSection
lstrcatA
EnumResourceNamesW
lstrcmpiA
GetFullPathNameA
IsBadReadPtr
lstrcpynA
ReadFile
CloseHandle
LCMapStringW
FreeEnvironmentStringsA
LCMapStringA
lstrlenW
MultiByteToWideChar
EnterCriticalSection
WriteFile
GetTickCount
MulDiv
GetEnvironmentStrings
GetOEMCP
GetLastError
VirtualProtect
SetFilePointer
CreateFileA
GetEnvironmentStringsW
GetDiskFreeSpaceA
LoadLibraryA
lstrlenA
GetThreadLocale
RaiseException
Sections
.text Size: 148KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ