Static task
static1
Behavioral task
behavioral1
Sample
1eac4841c83369df8cb2b258d1ac886a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1eac4841c83369df8cb2b258d1ac886a.exe
Resource
win10v2004-20231215-en
General
-
Target
1eac4841c83369df8cb2b258d1ac886a
-
Size
718KB
-
MD5
1eac4841c83369df8cb2b258d1ac886a
-
SHA1
e8706903f9d0d150451d58b469e9be90a1902d14
-
SHA256
77151533a852c22359c489f3292cbd7ada7f1cd94708026dd677ec6ccce4b974
-
SHA512
174fc8ceedeb5e754ac4ca1b425c2232692cb3b5f86aa479c5880b5a13017704e17bd47554a014d7d920e1c15e58f03ad9e64612d5be31163b29dcf360d541c5
-
SSDEEP
12288:J8422DCApiHUQ6kjv+Hpssa5uWAdB/MngUTFJEe4+iVaMNtn3MCd3E865ZfwN:J842SDE6yO3yLF6373ROZfw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1eac4841c83369df8cb2b258d1ac886a
Files
-
1eac4841c83369df8cb2b258d1ac886a.exe windows:4 windows x86 arch:x86
e247f1188223f157b1ead63d38fb6520
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AnimateWindow
RegisterClassExA
GetMenuDefaultItem
SetClassWord
SetWindowWord
RegisterClassA
GetTitleBarInfo
SwitchDesktop
GetMenuItemID
GetDoubleClickTime
CreateIcon
GetClassLongA
GetMessageExtraInfo
SetCursor
SetMenuItemInfoW
TrackPopupMenu
CharLowerA
LoadBitmapW
BeginPaint
KillTimer
DlgDirListComboBoxA
FrameRect
GetDC
GetIconInfo
SetScrollInfo
kernel32
InterlockedExchange
GetStartupInfoW
RaiseException
TlsFree
GlobalFindAtomW
SetLastError
GetCurrentProcessId
GetFileType
OpenMutexA
WriteConsoleOutputA
WriteConsoleA
ExitProcess
GetConsoleOutputCP
IsBadReadPtr
IsDebuggerPresent
GetProcessHeap
CreateFileA
RtlUnwind
GetStartupInfoA
EnumSystemLocalesA
FreeLibrary
GlobalFree
FreeEnvironmentStringsA
GetStdHandle
InterlockedDecrement
CompareStringW
GetDateFormatA
GetTickCount
GetDiskFreeSpaceA
GetConsoleCP
GetModuleHandleA
GetVersionExA
HeapDestroy
SetUnhandledExceptionFilter
GetCommandLineW
TlsSetValue
GetStringTypeW
GetLocaleInfoA
GetEnvironmentStrings
SetFilePointer
GetCPInfo
HeapFree
GetConsoleScreenBufferInfo
SetHandleCount
CreateProcessA
TlsAlloc
GetPrivateProfileSectionW
GetConsoleMode
WideCharToMultiByte
LCMapStringW
UnmapViewOfFile
RemoveDirectoryA
MultiByteToWideChar
GetACP
GetShortPathNameW
IsValidCodePage
VirtualFree
GetProcAddress
VirtualQuery
lstrlenA
GetSystemTimeAsFileTime
HeapValidate
HeapReAlloc
SetStdHandle
GetLastError
ReadConsoleInputA
GetStringTypeA
OutputDebugStringA
LeaveCriticalSection
UnhandledExceptionFilter
SetSystemTime
GetCurrentDirectoryW
HeapAlloc
VirtualAlloc
InitializeCriticalSection
GetCurrentProcess
LoadLibraryW
WriteConsoleW
FlushFileBuffers
CreateMutexA
GetCurrentThread
CompareStringA
TerminateProcess
DebugBreak
InterlockedIncrement
GetVersion
FileTimeToDosDateTime
QueryPerformanceCounter
IsValidLocale
CloseHandle
ReadFile
FillConsoleOutputCharacterA
GlobalReAlloc
GetCommandLineA
FreeEnvironmentStringsW
DeleteCriticalSection
GetLocaleInfoW
GetTimeFormatA
HeapCreate
LoadLibraryA
OutputDebugStringW
GetTimeZoneInformation
SetEnvironmentVariableA
FlushViewOfFile
CreateNamedPipeA
CreateFileMappingW
TlsGetValue
LCMapStringA
EnterCriticalSection
GetModuleFileNameA
WriteFile
GetThreadTimes
GetThreadContext
GetModuleFileNameW
GetCurrentThreadId
SetConsoleCtrlHandler
GetOEMCP
GlobalCompact
GetUserDefaultLCID
GetEnvironmentStringsW
comctl32
InitCommonControlsEx
gdi32
DrawEscape
EnumFontsW
SetLayout
PlayEnhMetaFileRecord
Sections
.text Size: 489KB - Virtual size: 489KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 95KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ