Static task
static1
Behavioral task
behavioral1
Sample
10c453200ccfe12d9e15fbcf13000dde.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10c453200ccfe12d9e15fbcf13000dde.exe
Resource
win10v2004-20231215-en
General
-
Target
10c453200ccfe12d9e15fbcf13000dde
-
Size
55KB
-
MD5
10c453200ccfe12d9e15fbcf13000dde
-
SHA1
5ffa70fa88392128159961ec3d160642a5fead7a
-
SHA256
e5af2f51dae0af6179f2facf0f39383d79541bc3ce014acaa418f273ac2f25e6
-
SHA512
420243d0d64efee1cbfa980bc089681027e8f8007493e4678cea5d594e4132a930a216e7937b88323543c18f54437e10e88cf8f245d0ca8172d27bc76aadd1ad
-
SSDEEP
768:VQsVXF7jBMkJouGT95M6l7yb7gN4bVuZDT8nFGA7A4nrv6+YsovE27tV5:VQsVXF1IHlC744baX6tFrdJov9R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10c453200ccfe12d9e15fbcf13000dde
Files
-
10c453200ccfe12d9e15fbcf13000dde.exe windows:4 windows x86 arch:x86
8ed769818dc8c8a0bd88456d196e9814
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cygwin1
__getreent
__main
_dll_crt0@0
_feinitialise
_fopen64
_impure_ptr
atoi
calloc
cos
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fclose
fprintf
fread
free
fseek
fwrite
getc
initstate
isspace
log
malloc
printf
random
realloc
setstate
sin
sprintf
sqrt
strcpy
strlen
time
cyggcc_s-1
__deregister_frame_info
__register_frame_info
kernel32
GetModuleHandleA
GetProcAddress
Sections
.text Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/14 Size: 512B - Virtual size: 54B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/30 Size: 1024B - Virtual size: 588B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/42 Size: 512B - Virtual size: 104B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/56 Size: 512B - Virtual size: 133B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ