Static task
static1
Behavioral task
behavioral1
Sample
f940cacb6bf7b0b8344f277031a5a17a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f940cacb6bf7b0b8344f277031a5a17a.exe
Resource
win10v2004-20231215-en
General
-
Target
f940cacb6bf7b0b8344f277031a5a17a
-
Size
17KB
-
MD5
f940cacb6bf7b0b8344f277031a5a17a
-
SHA1
4e5db121bc67ae7de7251d423224a3e451606c4a
-
SHA256
79fbcf852b0ad5f2cbb2506733474a8c87278f15285438f7caeda5e3d7bc59c5
-
SHA512
b9a26e4cc8fe494a012c43a8ed5c949cc8847cc1b1bd12be4924251eb7793347636766a0a2c743713c6ac1dbd9649111de9070d9abf7f482611651a28a48e076
-
SSDEEP
384:0TyRTAGP4peBPt1Df9to8e9WFTNvtQxVw:0GhLP4peBF1r9BeIFT3/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f940cacb6bf7b0b8344f277031a5a17a
Files
-
f940cacb6bf7b0b8344f277031a5a17a.exe windows:4 windows x86 arch:x86
581b33db055f06aaa0c291dacb0a516f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcmpiA
GlobalAlloc
ReadFile
PeekNamedPipe
Sleep
CreateProcessA
GetStartupInfoA
CreateFileA
GetModuleFileNameA
GetCommandLineA
GetLastError
CreateMutexA
CreateDirectoryA
GetCurrentThreadId
GetModuleHandleA
WriteFile
CloseHandle
DeleteFileA
LoadLibraryA
CreatePipe
GetProcAddress
user32
GetInputState
PostThreadMessageA
GetMessageA
LoadCursorA
CopyIcon
SetSystemCursor
MessageBoxA
advapi32
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_except_handler3
_controlfp
__set_app_type
__getmainargs
_acmdln
strlen
strcpy
sprintf
memset
printf
strcat
memcpy
strstr
getchar
exit
fclose
fopen
strncpy
fread
fseek
__CxxFrameHandler
fscanf
remove
_exit
_XcptFilter
_strlwr
iphlpapi
GetAdaptersInfo
ws2_32
inet_addr
wininet
InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA
Sections
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ