Static task
static1
Behavioral task
behavioral1
Sample
02f54eb5941c2184d27d4a227349f131.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
02f54eb5941c2184d27d4a227349f131.exe
Resource
win10v2004-20231215-en
General
-
Target
02f54eb5941c2184d27d4a227349f131
-
Size
183KB
-
MD5
02f54eb5941c2184d27d4a227349f131
-
SHA1
ca63fdaffc8a480b24f07b759831fb3fa427a2eb
-
SHA256
2a6e6b3f6f8d2e29a4d231df813aacc63621666c2cfafcc8c926549476c1eeef
-
SHA512
fd6af8dfc321e7a597d6ca83774a44e634592d3cb5725397a5ce9cc1391788451bddd68d45506342da6359b51094c1db1bd76315bf326cd506fc6314d30e0b28
-
SSDEEP
3072:oBd5tNG89CeE3/mj8oINZJ3XZsnST73WMnZyN9/SSe497uu38sHAw1c9TCCyGynL:oBd5tNGdA8oUZRZsnS3bO9/s497uu38
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02f54eb5941c2184d27d4a227349f131
Files
-
02f54eb5941c2184d27d4a227349f131.exe windows:4 windows x86 arch:x86
666842a2039adef5950453363b3a7628
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFileScatter
MoveFileWithProgressW
SetFileApisToANSI
SetMessageWaitingIndicator
SetErrorMode
GetProfileIntW
GetOEMCP
ResumeThread
GetEnvironmentStringsA
GetConsoleInputExeNameA
FindResourceExW
GetVersionExA
GetVolumeInformationW
GetTapeParameters
LocalLock
FileTimeToDosDateTime
GlobalFix
EnterCriticalSection
user32
CallWindowProcW
GrayStringA
DialogBoxIndirectParamA
GetDoubleClickTime
ShowCursor
SetWindowStationUser
ShowStartGlass
IsDialogMessageA
GetForegroundWindow
Sections
.text Size: 9KB - Virtual size: 811KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 169KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pack32 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ