Static task
static1
Behavioral task
behavioral1
Sample
1501839405e4035e846247fcb94ccd2a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1501839405e4035e846247fcb94ccd2a.exe
Resource
win10v2004-20231215-en
General
-
Target
1501839405e4035e846247fcb94ccd2a
-
Size
60KB
-
MD5
1501839405e4035e846247fcb94ccd2a
-
SHA1
b7f28f7e3f6bc2f95270a316b6f1435e0cfd6897
-
SHA256
7d1a7f78cdd1db537e6061c1ef249f920b55ac302286a7f3fcbe0980fda54ede
-
SHA512
9ea0136b584929e5ad93b566c0e246b81fddb46eddb9b1f766fc1f14091dcd74db101aa95dd0e898c395f46bc7f064b5ee4bc0e2b89417497f219d22ce73505a
-
SSDEEP
1536:yD/+YI3c5sdBTuE7l3ooR9SbDakhxdBtBHxmi7d:mi3c5s7lnnSbD3BtBRmUd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1501839405e4035e846247fcb94ccd2a
Files
-
1501839405e4035e846247fcb94ccd2a.exe windows:4 windows x86 arch:x86
2db8271ac2f6ecaa530576fb2a3b5a4b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
InitializeCriticalSection
HeapSize
DeleteFileA
SuspendThread
GetEnvironmentVariableA
HeapCreate
WaitForSingleObject
GetModuleHandleA
AddAtomW
ReleaseMutex
GetSystemInfo
GetCurrentDirectoryA
GetStartupInfoW
FindClose
GetTickCount
ResetEvent
CloseHandle
CreateFileA
CreateMutexW
FindClose
ExitProcess
GetFileSize
HeapDestroy
SetEndOfFile
wininet
DeleteUrlCacheEntryA
FtpGetCurrentDirectoryA
FtpPutFileA
HttpQueryInfoA
FtpDeleteFileA
HttpEndRequestA
FtpOpenFileA
FtpFindFirstFileA
FtpGetFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FtpCreateDirectoryA
FindCloseUrlCache
perfos
CloseOSObject
CloseOSObject
CloseOSObject
CloseOSObject
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE