Static task
static1
Behavioral task
behavioral1
Sample
383b0de3e8311a0d912aaa07967b8553.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
383b0de3e8311a0d912aaa07967b8553.exe
Resource
win10v2004-20231215-en
General
-
Target
383b0de3e8311a0d912aaa07967b8553
-
Size
6KB
-
MD5
383b0de3e8311a0d912aaa07967b8553
-
SHA1
e77432059d5e5eb1b0c77082a233d66077317deb
-
SHA256
eb12488854078edc946450523c8749c71419c0352d4d321d6d42fb9b3bd37151
-
SHA512
e390de25a5bc1d7dd6ab6cd0ba8ac56099658662066db232bdfab13ba7aff71537e7514b89873691a7dc3c79cbe426deba4235c93084c0f63e4e952c27b2f65d
-
SSDEEP
96:H8mBU+6JPd/DCcF2NTNWLTmT1i/Nu4JxSEX+qpfMwaB:Hc+6JNF2hAMi/Nu4Jx3XVpfM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 383b0de3e8311a0d912aaa07967b8553
Files
-
383b0de3e8311a0d912aaa07967b8553.exe windows:5 windows x86 arch:x86
8610cc55e27adb815f742de252adb446
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
msvcr90
__p__fmode
_encode_pointer
__set_app_type
_initterm
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
__p__commode
_controlfp_s
_crt_debugger_hook
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
_adjust_fdiv
__setusermatherr
_configthreadlocale
_invoke_watson
_initterm_e
?terminate@@YAXXZ
kernel32
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCommandLineA
UnhandledExceptionFilter
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ