Static task
static1
Behavioral task
behavioral1
Sample
451c6d0ff8c6d9f0e898bf727cc28038.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
451c6d0ff8c6d9f0e898bf727cc28038.exe
Resource
win10v2004-20231215-en
General
-
Target
451c6d0ff8c6d9f0e898bf727cc28038
-
Size
171KB
-
MD5
451c6d0ff8c6d9f0e898bf727cc28038
-
SHA1
449291b68ce0271ffc5250ca8ab4dd3ca29e6236
-
SHA256
cfe48cc70b927b207aee5de66e70cd5d9bd88c242ec2601ddef979fbb9d6bba1
-
SHA512
8a749c6fc4c2dc4d98e30496cb1b21e25b301a6650bccde49ca69c26cf01d921942dba1210799219286ec309f2843f0f8894982a3e901dd400566d3b71b6d7a1
-
SSDEEP
3072:Dl8doxmi5W2uiQ1lpgEACD2DXtEgQINk5iLoAFzcjlKBXaFIQ:34yuiQ5gEACDwWFIi5KCl4g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 451c6d0ff8c6d9f0e898bf727cc28038
Files
-
451c6d0ff8c6d9f0e898bf727cc28038.exe windows:1 windows x86 arch:x86
25a80734e472701a1d0ff42e8becc972
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetModuleFileNameA
WideCharToMultiByte
SetUnhandledExceptionFilter
TerminateProcess
GetVersionExA
GetStartupInfoW
LeaveCriticalSection
WideCharToMultiByte
GetModuleHandleW
GetSystemTimeAsFileTime
GetModuleHandleW
EnterCriticalSection
FormatMessageW
GetStartupInfoA
GetModuleHandleW
SetEvent
GetModuleHandleA
GetCommandLineW
GetCommandLineW
SetUnhandledExceptionFilter
WriteFile
lstrlenW
GetProcAddress
GetSystemTimeAsFileTime
FormatMessageW
SetEvent
GetStartupInfoA
WideCharToMultiByte
CloseHandle
UnhandledExceptionFilter
EnterCriticalSection
GetModuleHandleA
QueryPerformanceCounter
SetFilePointer
SetEvent
GetACP
ExitProcess
UnhandledExceptionFilter
GetProcessHeap
SetUnhandledExceptionFilter
HeapAlloc
lstrlenW
SetFilePointer
LoadLibraryW
Sections
.knme Size: 161KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lkhe Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uyyt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kpwj Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aqnc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.yrbd Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qwxc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.gdata Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.dldc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE