Static task
static1
Behavioral task
behavioral1
Sample
13598bb1390cfb0b42359c2042cd51bb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13598bb1390cfb0b42359c2042cd51bb.exe
Resource
win10v2004-20231222-en
General
-
Target
13598bb1390cfb0b42359c2042cd51bb
-
Size
559KB
-
MD5
13598bb1390cfb0b42359c2042cd51bb
-
SHA1
a8f0d76b08d1e0d2cfb06d5c10468e40c135ff23
-
SHA256
59df40db7f6c34402cc642cb307c0160cf56672d6f75c10289114265e68e7148
-
SHA512
40f47e744baa83fa6c7055551a5e0e66d1a4c28991e87f8db873512074d6b3b902118dd97fc1d0dbcd2b54259e0c47ceddea62fd62781d9fc25fcb590c0a856b
-
SSDEEP
12288:23SP3kTSg36l/KTWfyRkRCVnQo7LYlP2TNCvuz4gsHKY:23S/kTL6crRkRCk2T6ubwP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13598bb1390cfb0b42359c2042cd51bb
Files
-
13598bb1390cfb0b42359c2042cd51bb.exe windows:4 windows x86 arch:x86
b8bc4babca925ead712d95fef83dd9e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
GetStringTypeA
LoadLibraryA
TlsSetValue
VirtualAlloc
VirtualFree
lstrcatA
msvcrt
exit
wcscat
wcslen
__p__commode
setupapi
SetupAddInstallSectionToDiskSpaceListA
SetupAddSectionToDiskSpaceListA
SetupDiBuildClassInfoList
SetupDiRemoveDeviceInterface
user32
CharToOemBuffW
EnumDesktopsA
GetAncestor
GetAsyncKeyState
GetClassNameW
GetKeyNameTextA
IsCharAlphaW
IsRectEmpty
MapVirtualKeyW
OemToCharW
SendMessageTimeoutA
SendMessageW
SetTimer
ToUnicodeEx
UnhookWindowsHookEx
wvsprintfA
Sections
.text Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 315KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rata Size: 190KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE