Static task
static1
Behavioral task
behavioral1
Sample
f9e5d8cb94c3bf896a6195b72cd41293.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f9e5d8cb94c3bf896a6195b72cd41293.exe
Resource
win10v2004-20231222-en
General
-
Target
f9e5d8cb94c3bf896a6195b72cd41293
-
Size
176KB
-
MD5
f9e5d8cb94c3bf896a6195b72cd41293
-
SHA1
fdb5e6a6c299f96e1f241a927d69971d2b5d26e2
-
SHA256
54f72b5ea985ea82dcb4f919936d3bb27aafc0f26ff1259bf7e9c0db958cc5df
-
SHA512
2ab74d560305e1130d79197676e8d073727bef5bcf16c40ce3a357e7d880ded8bebb2ea3ea5cbf64127ad00a78a5fb045401900d5f150a144dc9333c75125d80
-
SSDEEP
1536:AnIjFcadsLux/usT1v6pf+PPoxUX/6gP3X0HykY+mHPe62F2zcmfaoiHdAy2/Exf:AISads2/L61FecHWoMGH2xqrnVostv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9e5d8cb94c3bf896a6195b72cd41293
Files
-
f9e5d8cb94c3bf896a6195b72cd41293.exe windows:4 windows x86 arch:x86
d25394ede2566ef5d268ef868fa567f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
cabinet
FCIDestroy
FCIAddFile
FCIFlushCabinet
FCICreate
kernel32
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetFileAttributesA
SetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
GetSystemDirectoryA
CopyFileA
CloseHandle
WriteFile
GetPrivateProfileStringA
GetModuleFileNameA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
CreateProcessA
GetComputerNameA
GetWindowsDirectoryA
GetDriveTypeA
Sleep
GetSystemTime
GetVolumeInformationA
GetDiskFreeSpaceA
CreateThread
ResumeThread
GetCommandLineW
SetEnvironmentVariableA
CompareStringW
GetFileInformationByHandle
CreateFileA
SetFilePointer
CompareStringA
LCMapStringW
LCMapStringA
HeapAlloc
GetLastError
HeapFree
MultiByteToWideChar
ReadFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
RaiseException
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
GetStdHandle
GetFileType
SetHandleCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
RtlUnwind
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEndOfFile
GetCPInfo
GetACP
GetOEMCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
FlushFileBuffers
GetLocaleInfoW
user32
wsprintfA
advapi32
RegSetValueExA
RegOpenKeyExA
shell32
ShellExecuteA
CommandLineToArgvW
Sections
.text Size: 136KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ