Static task
static1
Behavioral task
behavioral1
Sample
f939d69605069704a4662b24c4510f39.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f939d69605069704a4662b24c4510f39.exe
Resource
win10v2004-20231215-en
General
-
Target
f939d69605069704a4662b24c4510f39
-
Size
48KB
-
MD5
f939d69605069704a4662b24c4510f39
-
SHA1
0e4bb2a23383024e7110d3f02a2b0d5651378dcb
-
SHA256
e31085669a9b74838f354dc4cd1ff1fa87331acee401e63c85f90bf3b0ff1ef5
-
SHA512
18efe6fa18d71be7888cf8e1384a047472ff091b15ba0af5ca293809fe0dcd59953e3bab7a3e72ec0d80aade8ae4d55c951a43ade036dfabb06a85c60fb01987
-
SSDEEP
768:rivArv2OO7mAl8wuq5vWPyqkktJz1sBHBPCNEEwL3ohu7ajnSHVIpJKZa:GvOO7mg/9lWPymtzsPCNEEEYhu81pkZa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f939d69605069704a4662b24c4510f39
Files
-
f939d69605069704a4662b24c4510f39.exe windows:5 windows x86 arch:x86
c71bccc5d80182f6600f488537f3edc2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceLanguagesW
ExitProcess
ExitThread
GetACP
GetCommandLineA
GetDateFormatA
GetModuleHandleA
GetOEMCP
GetStartupInfoA
GetVersion
HeapAlloc
LeaveCriticalSection
MultiByteToWideChar
SetLastError
SetUnhandledExceptionFilter
VirtualAlloc
VirtualFree
lstrcpyA
msvcrt
__getmainargs
__p__commode
__set_app_type
_except_handler3
_exit
exit
isdigit
sscanf
ole32
CoGetMalloc
CoInitialize
CoInitializeSecurity
CoTaskMemFree
CoCreateInstance
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ