Static task
static1
Behavioral task
behavioral1
Sample
1743425a049c54fd167710d3086d2d89.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1743425a049c54fd167710d3086d2d89.exe
Resource
win10v2004-20231215-en
General
-
Target
1743425a049c54fd167710d3086d2d89
-
Size
27KB
-
MD5
1743425a049c54fd167710d3086d2d89
-
SHA1
6c048666dda20a16e173242ccee872669d063c31
-
SHA256
9d798ac5ca5db0dea0d4dfca69afa019009ad2e54fc2fb9a753074cb4cccb9a3
-
SHA512
451539922aca40e1b0eb8a943ed9ed608a7748fb1a0948ecbb2231952686e352dd6df2d841de181e5e564d689a65f61eb5c675f84a8e9ca927f281ce70d6eabd
-
SSDEEP
384:6bAMu9pFT5SlKyx5R4oEI3bedaBAWoWwyPydhQAi1WUhKZAgDdjY6cOvK6:6bxuRTolKyxrx8a2NpoMFUWUheR3w6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1743425a049c54fd167710d3086d2d89
Files
-
1743425a049c54fd167710d3086d2d89.exe windows:4 windows x86 arch:x86
a3406d4d4e33935b5ead16039ca1a8a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
lstrcpyA
lstrlenA
GetSystemDirectoryA
InitializeCriticalSection
CreateThread
GetLastError
CreateSemaphoreA
CreateProcessA
GetFileAttributesA
ExpandEnvironmentStringsA
CopyFileA
DeleteFileA
ExitProcess
lstrcmpA
TerminateProcess
GetFileSize
OpenProcess
GetStartupInfoA
GetModuleHandleA
ReadFile
MultiByteToWideChar
SetFilePointer
WinExec
lstrcatA
IsBadWritePtr
WriteFile
Sleep
CreateFileA
CloseHandle
user32
MessageBoxA
DispatchMessageA
TranslateMessage
IsWindow
wsprintfA
GetMessageA
ShowWindow
CreateDialogParamA
LoadIconA
IsDialogMessageA
SetTimer
advapi32
RegFlushKey
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyA
shell32
Shell_NotifyIconA
SHGetSpecialFolderPathA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
msvcrt
_initterm
__getmainargs
_acmdln
exit
__setusermatherr
_exit
_onexit
__dllonexit
free
_except_handler3
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_XcptFilter
atoi
_splitpath
_snprintf
_stricmp
rand
wininet
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
InternetReadFile
psapi
EnumProcesses
GetModuleFileNameExA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ