Static task
static1
Behavioral task
behavioral1
Sample
01faae8d0bd9f29511cd9ea3baa28416.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01faae8d0bd9f29511cd9ea3baa28416.exe
Resource
win10v2004-20231215-en
General
-
Target
01faae8d0bd9f29511cd9ea3baa28416
-
Size
2.4MB
-
MD5
01faae8d0bd9f29511cd9ea3baa28416
-
SHA1
977154b093e8f85937b3df160194df222fe95115
-
SHA256
4473240fd651b495a0f0326bf2403bf770055551e749d2bfd2a8c3c3ef023085
-
SHA512
0601a62829dd8a5f6efaae70561da1307811c481d62076d1c3b4d8fdc1969877bddd5ad8a371ed1e0cc15fd0670069e7082406969d0de9b8037e3fb997b70307
-
SSDEEP
24576:M6xwPoLdu6Mcg72AKaFpkgD6BZrdgrc/FETua0w2welifU+FUe8xaZLBt1Bg4:eMjgSAKS2Lddg1qw2we6t8xavt1/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01faae8d0bd9f29511cd9ea3baa28416
Files
-
01faae8d0bd9f29511cd9ea3baa28416.exe windows:4 windows x86 arch:x86
9021f11d347f989515257aec592beabe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
VirtualProtect
LoadResource
FindResourceA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
VirtualAlloc
HeapReAlloc
IsBadWritePtr
RtlUnwind
InterlockedExchange
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetSystemInfo
Sections
.text Size: 336KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 228KB - Virtual size: 945KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 102B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ