Static task
static1
Behavioral task
behavioral1
Sample
793817bebd5de4b3448ff0af6a5e7531.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
793817bebd5de4b3448ff0af6a5e7531.exe
Resource
win10v2004-20231222-en
General
-
Target
793817bebd5de4b3448ff0af6a5e7531
-
Size
220KB
-
MD5
793817bebd5de4b3448ff0af6a5e7531
-
SHA1
c43a0e41ac9ca9fc659b772ca36587f887239f9f
-
SHA256
e93439d537bce8d51f3cd62fab35e170a29e72e314e25f79436005c9604a6ff0
-
SHA512
1a7968651473548634a71b19178eedad22a9c19e9d709d7e9357bb98a534954335c1514334f1c4f1235f1bfe63933f9b578ffde17e9bbd05450bec85d4534a1e
-
SSDEEP
1536:KjU59vvXrRM3WSZrHphJmWoM1ZglpLoewRzjq6+9o9oRWG0YG:b59HbRMZrHPVPelp0ew1m6+a9ooaG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 793817bebd5de4b3448ff0af6a5e7531
Files
-
793817bebd5de4b3448ff0af6a5e7531.exe windows:4 windows x86 arch:x86
47a38d48105d34a59ae53707a730d188
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
kernel32
FreeEnvironmentStringsW
LCMapStringA
CreateProcessA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
RaiseException
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetCurrentProcess
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
LCMapStringW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetLastError
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
HeapAlloc
HeapReAlloc
VirtualAlloc
SetConsoleCtrlHandler
GetCPInfo
GetACP
GetOEMCP
IsBadCodePtr
ReadFile
SetStdHandle
GetStringTypeA
GetStringTypeW
Sections
.text Size: 184KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ