Static task
static1
Behavioral task
behavioral1
Sample
02a6176ba73367c22cf9a96c9a62052b.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02a6176ba73367c22cf9a96c9a62052b.exe
Resource
win10v2004-20231215-en
General
-
Target
02a6176ba73367c22cf9a96c9a62052b
-
Size
116KB
-
MD5
02a6176ba73367c22cf9a96c9a62052b
-
SHA1
f37441b5b69e3820b96dcb8efe1a3ccbb197f120
-
SHA256
e60a5e9b00d564e02c52e7198ca215f2b93797620ea4d389bf364235f5c1e421
-
SHA512
7edb17c3706ef1796e354613238cf100f2bb30a75065e1f3605e861d00d0b28abc7dc9fcc62db4ae73d9d9bc782feaf8f01beb93423cc51f744de92f758611d8
-
SSDEEP
768:HXMJmKIWYzXO9LiY31FVA+gVgrrTqwhTXyLmFMuqpFlynNOAsefsfQhw+LZJC5:VzXO9LgOKwhGiFMupi3Ma
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02a6176ba73367c22cf9a96c9a62052b
Files
-
02a6176ba73367c22cf9a96c9a62052b.exe windows:4 windows x86 arch:x86
1cb2c516220ba1f0830c24f54a392edc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
GetStartupInfoA
GetStdHandle
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameA
GetModuleHandleA
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetProcessHeap
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
TlsSetValue
CreateThread
ExitThread
LocalAlloc
LocalFree
Sleep
SuspendThread
ResumeThread
TerminateThread
WaitForSingleObject
SetThreadPriority
GetThreadPriority
CreateEventA
ResetEvent
SetEvent
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
ReadProcessMemory
SetUnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
oleaut32
SysAllocStringLen
SysFreeString
user32
CharUpperBuffW
CharLowerBuffW
MessageBoxA
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE