Static task
static1
Behavioral task
behavioral1
Sample
0af4533beadffb85e5a51b7e23ffe0af.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0af4533beadffb85e5a51b7e23ffe0af.exe
Resource
win10v2004-20231215-en
General
-
Target
0af4533beadffb85e5a51b7e23ffe0af
-
Size
127KB
-
MD5
0af4533beadffb85e5a51b7e23ffe0af
-
SHA1
7efe01848ade75b7f196a6f8f0d2e7c02e72306e
-
SHA256
acb7b29045f62ed93ddf028f05ad80d4846ea485314ecf2dfe631fb60e563c38
-
SHA512
acbbcf218f8bbf03496f343c642897a3943db2a4732e74a90614b81de8383911c9564aa7d70362ca87f924916f82e6cf255e986ecdd5c4937c9f883c4647e213
-
SSDEEP
1536:Ph8uhl7xHmTvS8m2j6G8bRitfpazcd9021hM2rR3q7VoagHf:Ph8mGTvV6OdpaYdz1S8a7Voa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0af4533beadffb85e5a51b7e23ffe0af
Files
-
0af4533beadffb85e5a51b7e23ffe0af.exe windows:4 windows x86 arch:x86
8ad48b04f6ecc5f7e8e47b4b087c523b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
CreateThread
ReadFile
GetCPInfo
GlobalFree
GetFileTime
OpenFile
SetLastError
GetFileSize
FindAtomA
DeleteFileA
DeleteFileW
CreateProcessA
GetConsoleMode
GetComputerNameA
Sleep
GetCommandLineA
DeleteAtom
OpenFileMappingA
WriteFile
GetLastError
ReadConsoleA
user32
DrawTextW
GetDC
LoadCursorA
CopyRect
CloseWindow
DrawIconEx
IsMenu
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 16.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 121B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ