Static task
static1
Behavioral task
behavioral1
Sample
082f230a0dea9ab878bdc63e77f3723d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
082f230a0dea9ab878bdc63e77f3723d.exe
Resource
win10v2004-20231222-en
General
-
Target
082f230a0dea9ab878bdc63e77f3723d
-
Size
60KB
-
MD5
082f230a0dea9ab878bdc63e77f3723d
-
SHA1
c62529fd23c204b461bd0b3ce76a3ceb750e004a
-
SHA256
251439bbf82767b629226ba70abd2bf1337de480472bb2e1430b3743a05e046e
-
SHA512
387372b331310de9dd16efd5c906c213f168a59198a9c82e8169c2b98648e5731b157f88e0e89429c2972277e04cb741c0ee9916ba90b71dac6e4dae1152e79f
-
SSDEEP
768:ODdeA0u+NFKFYGmorycc0M+4r2TKkUbFrnRI1y:ksAJ+0ryFA1K/V+y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 082f230a0dea9ab878bdc63e77f3723d
Files
-
082f230a0dea9ab878bdc63e77f3723d.exe windows:4 windows x86 arch:x86
e64bc855353244e211067d1ae41a10e3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
WritePrivateProfileStringA
GetWindowsDirectoryA
CloseHandle
WaitForSingleObject
CreateThread
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetDriveTypeA
GetLogicalDriveStringsA
FreeLibrary
LoadLibraryA
DeleteFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileA
CopyFileA
GetTempPathA
GlobalFree
GlobalAlloc
FindClose
FindFirstFileA
FindNextFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetStdHandle
GetFileType
LCMapStringW
LCMapStringA
GetStartupInfoA
Sleep
GetVersion
ExitProcess
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
SetFilePointer
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
SetStdHandle
user32
MessageBoxA
GetWindowTextA
EnumWindows
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE