Static task
static1
Behavioral task
behavioral1
Sample
03a027a29d0a72289da2c3b71f8f1505.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
03a027a29d0a72289da2c3b71f8f1505.exe
Resource
win10v2004-20231215-en
General
-
Target
03a027a29d0a72289da2c3b71f8f1505
-
Size
113KB
-
MD5
03a027a29d0a72289da2c3b71f8f1505
-
SHA1
f1cc6535f0585905724e7ac05fa00fbdc5944850
-
SHA256
32ebb60cb3737c1a9f6249fd442c4b0c994671cde562f9a6a7deb52392b68ca8
-
SHA512
f47de5350ffea2b8a1dec739f0702324633302c47b9e3a87a7a3093cf2bf223ce05bfe037ae0e8355d6e12d75f437f050867a3759b229a8fd3ace03e8111cd85
-
SSDEEP
3072:Kps1zOxgOEl4pT7tStyun5cMjT+fIqpJbw:jzOxgDCin5JKDw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03a027a29d0a72289da2c3b71f8f1505
Files
-
03a027a29d0a72289da2c3b71f8f1505.exe windows:5 windows x86 arch:x86
31d56c29e48524ebbc7de4714da6583b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetProcAddress
GetModuleHandleW
lstrlenW
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
GetModuleFileNameW
LoadLibraryW
GetVersionExW
GetCurrentProcess
GetNativeSystemInfo
CloseHandle
CreateFileW
GetSystemDirectoryW
WaitForSingleObject
LocalAlloc
FormatMessageW
GetLongPathNameW
GetShortPathNameW
GetWindowsDirectoryW
OutputDebugStringW
GetCurrentProcessId
GetCurrentThreadId
LoadLibraryA
LocalFree
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
user32
CharNextW
wsprintfW
ole32
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
oleaut32
VarUI4FromStr
SysAllocStringByteLen
SysStringLen
SysAllocString
SysFreeString
msvcr100
??3@YAXPAX@Z
??_V@YAXPAX@Z
__CxxFrameHandler3
memcpy_s
memset
wcsstr
malloc
free
_CxxThrowException
wcsncpy_s
_recalloc
??_U@YAPAXI@Z
__argc
__wargv
swprintf_s
_wtoi
wcscpy_s
_wsplitpath_s
wcscat_s
_wstat64i32
_localtime64
_snwprintf_s
wcsftime
_ftime64_s
_vsnwprintf_s
memcpy
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
_invoke_watson
_controlfp_s
??2@YAPAXI@Z
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.trdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE