Static task
static1
Behavioral task
behavioral1
Sample
0ae5e3f9b8f682849cd4db4335422174.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ae5e3f9b8f682849cd4db4335422174.exe
Resource
win10v2004-20231215-en
General
-
Target
0ae5e3f9b8f682849cd4db4335422174
-
Size
233KB
-
MD5
0ae5e3f9b8f682849cd4db4335422174
-
SHA1
c91c8556c44d5f18b0a7a298eb3afa18555ff930
-
SHA256
18ad0178c8cc332002732d8dbc6eaf93fddaf91b042f0b0f03e7c97d8147e7db
-
SHA512
83913334e65fc82042f2e933bc4b20be61b259bedd09f3a9e779bf92f865108f55399e8597eba0974c63884e28d1cea7d824200cde463a6dc274aaae4e3f6c17
-
SSDEEP
6144:xZEjiPnqZIxIfY90m6nYw9j+x5cD67rput4fO6tS5L:xMiPRUY90mQYek4+26tS5L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae5e3f9b8f682849cd4db4335422174
Files
-
0ae5e3f9b8f682849cd4db4335422174.exe windows:4 windows x86 arch:x86
025cbeef6abff703a46f768bf3ede707
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetProfileIntW
DeleteFileA
WaitForSingleObject
ReleaseMutex
InitializeCriticalSection
CloseHandle
GetCalendarInfoA
ResetEvent
GetStartupInfoW
HeapSize
HeapDestroy
GetTickCount
ExitProcess
HeapCreate
CreateFileA
GetModuleHandleA
GetFileSize
CreateMutexW
GetCurrentDirectoryA
FindClose
SetLastError
GetTickCount
GetEnvironmentVariableA
SuspendThread
user32
DispatchMessageW
GetCursorPos
GetDC
CallWindowProcW
GetWindowLongA
GetDC
PeekMessageA
GetDC
GetClassInfoA
MessageBoxA
DispatchMessageW
GetSysColor
GetDC
dmintf
DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 226KB - Virtual size: 226KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ