Static task
static1
Behavioral task
behavioral1
Sample
10c92e0e8dca5a64da1fc9b7d62f9c57.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10c92e0e8dca5a64da1fc9b7d62f9c57.exe
Resource
win10v2004-20231215-en
General
-
Target
10c92e0e8dca5a64da1fc9b7d62f9c57
-
Size
103KB
-
MD5
10c92e0e8dca5a64da1fc9b7d62f9c57
-
SHA1
0eba344b8289e0f3ce5532bb9241a5092d463ee0
-
SHA256
46052fbd15c48c1040397e2a448f717214bc116996cade2b15e7fb47cf60ad9f
-
SHA512
81f63905a82825ebab2a2fc9207aa6bc56c4a941feb340b883d8944afc085622a06050693a291a35c2cdad764ece8a2ddc32d230fb40a96f56532c827ba7eb04
-
SSDEEP
1536:xeRyLfPzsJVDV6hQzCppdaiDPKEuER8TIujulZ/Bpvl9tqDQC87vi:xhLAJVDqSCd3CEmIuj2/l9tqMCmvi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10c92e0e8dca5a64da1fc9b7d62f9c57
Files
-
10c92e0e8dca5a64da1fc9b7d62f9c57.exe windows:5 windows x86 arch:x86
99131dcde7fc2f2df2a111b48a37f41d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
tolower
__setusermatherr
_XcptFilter
_adjust_fdiv
exit
puts
_initterm
__mb_cur_max
__p__commode
_acmdln
__getmainargs
_stricmp
sin
sqrt
_snwprintf
__set_app_type
_itoa
toupper
_ultoa
strtol
__p__fmode
atoi
strncpy
_umask
_kbhit
_strdup
_except_handler3
_exit
kernel32
GlobalAlloc
GetTimeZoneInformation
OutputDebugStringA
FileTimeToSystemTime
GetStartupInfoA
TerminateProcess
CreateProcessW
IsBadWritePtr
GetCurrentDirectoryA
MultiByteToWideChar
GetStartupInfoW
GetDateFormatA
WideCharToMultiByte
RtlUnwind
GetModuleHandleA
GetSystemDirectoryA
SetUnhandledExceptionFilter
GetFileTime
VirtualProtect
IsBadCodePtr
user32
GetWindowTextA
EqualRect
SetCapture
IsIconic
FindWindowA
GetClassInfoA
BeginPaint
GetSubMenu
GetSysColorBrush
IsZoomed
SetWindowLongA
UnhookWindowsHookEx
oleaut32
VariantClear
SafeArrayPutElement
CreateErrorInfo
SetErrorInfo
SysFreeString
SafeArrayGetElement
GetErrorInfo
SafeArrayRedim
VariantCopyInd
SysReAllocStringLen
advapi32
RevertToSelf
CryptAcquireContextA
RegCreateKeyA
InitiateSystemShutdownA
EqualSid
QueryServiceStatus
AllocateAndInitializeSid
CloseServiceHandle
RegEnumKeyExA
Sections
.text Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ