Static task
static1
Behavioral task
behavioral1
Sample
03a84d6513fecf5972e220e97cf69507.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
03a84d6513fecf5972e220e97cf69507.exe
Resource
win10v2004-20231215-en
General
-
Target
03a84d6513fecf5972e220e97cf69507
-
Size
224KB
-
MD5
03a84d6513fecf5972e220e97cf69507
-
SHA1
0f5caaa633c8ef4a982b80fda6a394676d7896c0
-
SHA256
a9135ba54697dfa30b9c50b85604b2a64c14d3b44f819d0b7a2e3d320c2788ff
-
SHA512
288375e22da8645b17adbf30444da9c88a17a17840e335fa8deb6a1292d6b7d8776c799ad16b1e3fc81639a84473e07f789f642b343db9db66d833a035b9186a
-
SSDEEP
6144:MGO/G8WIuSepQDw5HTiAx8CEBzr1tgkcMbpo:PKgSep7HPx8xt16al
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03a84d6513fecf5972e220e97cf69507
Files
-
03a84d6513fecf5972e220e97cf69507.exe windows:4 windows x86 arch:x86
f4cc9a308694578c2e583ba5ddd0a688
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
VirtualAlloc
ExitProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetVersionExA
InterlockedExchange
VirtualQuery
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 204KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ