Static task
static1
Behavioral task
behavioral1
Sample
1e9786b8109b1658ab0ebc205bd2fa53.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1e9786b8109b1658ab0ebc205bd2fa53.exe
Resource
win10v2004-20231215-en
General
-
Target
1e9786b8109b1658ab0ebc205bd2fa53
-
Size
104KB
-
MD5
1e9786b8109b1658ab0ebc205bd2fa53
-
SHA1
936b530779f6056cdce89125c781a8e60eb348ba
-
SHA256
bf7de761baf3eda7d1584cd39674b02a2af73c52c1fcd466c2ed9c61668bd745
-
SHA512
1e4fe90877ef44ffdfca7cc8d3427afeee4c9da45bd089f6fbbb185468ec6e8c8634ff968b1acb0c75d9fd1acb2ed43a5495b150cc5a3be67c57fa35e2226e77
-
SSDEEP
1536:vnMTIDSKjs59/ZwqNx3g179C3hg3OUKyFvPd1hxCU5TY9rv:fMTpKjMcRCxgev+dJCU5T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1e9786b8109b1658ab0ebc205bd2fa53
Files
-
1e9786b8109b1658ab0ebc205bd2fa53.exe windows:4 windows x86 arch:x86
9e77948f7308c2afa09269692c40a6d8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
GetCommandLineA
CopyFileW
FindAtomA
WriteFile
CopyFileExA
GetFileSize
CreateProcessA
ReadConsoleA
ExitThread
DeleteAtom
Sleep
OpenFile
GetStdHandle
FindFirstFileA
DeleteFileA
CreateDirectoryA
WriteFile
Sleep
CopyFileW
CopyFileExW
CreateProcessA
GetFileSize
DeleteAtom
GetCommandLineA
DeleteFileW
GlobalFree
CopyFileA
CreateThread
OpenFile
GetStdHandle
GetConsoleMode
ReadConsoleA
ReadFile
CreateThread
FindFirstFileA
CopyFileW
GetComputerNameA
GetConsoleMode
DeleteFileA
CreateProcessA
CreateDirectoryA
Sleep
CopyFileA
GetStdHandle
FindFirstFileA
CopyFileExA
FindAtomA
ReadFile
WriteFile
CopyFileExW
GetConsoleMode
GetFileSize
OpenFileMappingA
GlobalFree
OpenFile
GetCommandLineA
CreateDirectoryA
CopyFileA
DeleteFileA
DeleteFileW
GetConsoleMode
CopyFileA
GetLastError
GetStdHandle
CreateThread
GetFileSize
WriteFile
ExitThread
FindFirstFileA
ReadFile
advapi32
RegQueryInfoKeyW
RegEnumValueW
RegEnumKeyExA
RegDeleteKeyA
RegLoadKeyA
RegQueryValueExW
RegEnumKeyW
RegEnumKeyA
RegOpenKeyExW
RegOpenKeyExA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.kmdata Size: 76KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bdata Size: 4KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ