Static task
static1
Behavioral task
behavioral1
Sample
030e9552d28853f414ebc3efd511d645.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
030e9552d28853f414ebc3efd511d645.exe
Resource
win10v2004-20231222-en
General
-
Target
030e9552d28853f414ebc3efd511d645
-
Size
55KB
-
MD5
030e9552d28853f414ebc3efd511d645
-
SHA1
680aecdc64f7ada36d61e9064cfdb72b443e0f7f
-
SHA256
8425141b01ddfc0f647041dd2aaa119a73baaf9ca8d922a40c2aa2f2d5de5325
-
SHA512
aa89fa6cdcee1f0da43b500ee6d36c98d3d574db852db1b94fedd1a9e48a8f8c3061614b202796e512026c38b226beb19cf67187f02ae98b7771ede7aec68fb0
-
SSDEEP
768:7xmaYC8e2deZZujZBuo6Pl+NZgJ4bqUhjPzj8aA3+q8fnzbfxqha5wqZ:7axeZgjZYo66ZgGqUhrjJXFwY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 030e9552d28853f414ebc3efd511d645
Files
-
030e9552d28853f414ebc3efd511d645.exe windows:4 windows x86 arch:x86
64bc9219a31e011ab17d7969582ff6bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
LockResource
CloseHandle
GetStartupInfoA
advapi32
GetUserNameA
msvcrt
strcmp
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
Sections
BitArts Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RSRXc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE