Static task
static1
Behavioral task
behavioral1
Sample
0a41d2dfd9e83e69f9126c6f6e208ccf.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0a41d2dfd9e83e69f9126c6f6e208ccf.exe
Resource
win10v2004-20231215-en
General
-
Target
0a41d2dfd9e83e69f9126c6f6e208ccf
-
Size
1.2MB
-
MD5
0a41d2dfd9e83e69f9126c6f6e208ccf
-
SHA1
c8cc12cbdc0ec1630b60abc880d240c97dfaaf59
-
SHA256
d631f6fb4e937518b533bb60b5e803cf0dd914644a83acf93d2a4203a20fc5db
-
SHA512
ce45af5e3148afd01bdfa68d06eccce6a55f715ca634fa582bf9d430234cc8bdcee9135f3a3a5abce6b69797b4db0c4d7ecb0fd4c0e79106cbb48c096663ab97
-
SSDEEP
24576:OPckhcv4igg/E5cQHU2femo+AynhEyi7J63n47JPaRX7JgLPR:OPckhLxe4hEyGE30oBwPR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a41d2dfd9e83e69f9126c6f6e208ccf
Files
-
0a41d2dfd9e83e69f9126c6f6e208ccf.exe windows:6 windows x86 arch:x86
d76732676b0ab147b4809b56870b1a80
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
GetCommandLineA
EncodePointer
DecodePointer
GetLastError
HeapFree
HeapAlloc
SetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
IsProcessorFeaturePresent
RaiseException
HeapSize
Sleep
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LoadLibraryExW
OutputDebugStringW
LoadLibraryW
RtlUnwind
LCMapStringW
HeapReAlloc
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CloseHandle
SetStdHandle
WriteConsoleW
CreateFileW
Sections
.text Size: 439KB - Virtual size: 439KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 734KB - Virtual size: 781KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ