Static task
static1
Behavioral task
behavioral1
Sample
f99ff8a138b9943b4e4e7db4e358a133.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f99ff8a138b9943b4e4e7db4e358a133.exe
Resource
win10v2004-20231215-en
General
-
Target
f99ff8a138b9943b4e4e7db4e358a133
-
Size
248KB
-
MD5
f99ff8a138b9943b4e4e7db4e358a133
-
SHA1
b047179be347703ff409cfc05d1231b840a8fb71
-
SHA256
6056a64f30d689363ac991197426118edfb94981429e115576ab8ce240895f82
-
SHA512
fa7375e134a51326f337e21937c102c047206f7a2963ec23dec4a8c9f88621429062efe2726427bfb90cd8bf57d9214624840595a9f6efc9566c229b0eba9c84
-
SSDEEP
6144:wln8/S3b26+A7MqIhC+/P/GONEEI0uYcaIiP/KEeY:wB8q3bN+aIA+/nGONEEI0uFa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f99ff8a138b9943b4e4e7db4e358a133
Files
-
f99ff8a138b9943b4e4e7db4e358a133.exe windows:4 windows x86 arch:x86
227bd8cdfc7a78ade1e13e206964c9cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileInformationByHandle
SetErrorMode
SetConsoleCtrlHandler
SetLastError
GetCommandLineA
RaiseException
GetFileType
GetLastError
VirtualAlloc
VirtualFree
GetVersionExA
CloseHandle
GetStdHandle
FormatMessageA
DebugBreak
FreeLibrary
GetCurrentThread
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetModuleFileNameA
VirtualQuery
MapViewOfFile
CreateFileMappingA
CreateFileA
GetModuleHandleA
SetEndOfFile
SetFilePointer
WriteFile
DeleteFileA
WaitForSingleObject
SetThreadPriority
CreateProcessA
Sleep
Beep
GetLocalTime
SetLocalTime
ReadFile
GetTempFileNameA
GetTempPathA
GetFullPathNameA
GetACP
FlushFileBuffers
GetVersion
ExitProcess
TerminateProcess
UnhandledExceptionFilter
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
MultiByteToWideChar
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
IsBadWritePtr
GetCPInfo
GetOEMCP
WriteConsoleA
SetEnvironmentVariableW
SetEnvironmentVariableA
GetFileAttributesA
CompareStringA
CompareStringW
SetStdHandle
GetExitCodeProcess
Sections
.text Size: 196KB - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trace Size: 4KB - Virtual size: 255B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ