Static task
static1
Behavioral task
behavioral1
Sample
0c77500a376402cfad864c1454b8df2a.exe
Resource
win7-20231215-en
General
-
Target
0c77500a376402cfad864c1454b8df2a
-
Size
170KB
-
MD5
0c77500a376402cfad864c1454b8df2a
-
SHA1
4faf5cdade7e6011174b17ea8f6f141f9e071030
-
SHA256
e99c6b040873bcd813f2a71d04a7e71f2888b8793f630575b50ceb59b9d9750a
-
SHA512
b2c80afa32b45db1a70453de2a693aa50dd9a104ac857b8c1a6ddaec4875865480cdaa550b8cc35e12ef96e37d1b5cf854641b7854d716545aa36f7f5e11bad2
-
SSDEEP
3072:+5ERKdsNSE8jWf+FnGevgjFA+WzmLpJhJ4RpS:+wB8qonGeoFA0lyp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c77500a376402cfad864c1454b8df2a
Files
-
0c77500a376402cfad864c1454b8df2a.exe windows:5 windows x86 arch:x86
4d6634768ec87e8f2e6ce3c9ec9a57fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
ReadFile
CreateDirectoryW
CreateFileW
GetLastError
GetTickCount
GetTempPathW
GetTempFileNameW
RemoveDirectoryW
DeleteFileW
GetModuleFileNameW
GetFileSize
LockFileEx
UnlockFile
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetEvent
Sleep
CreateEventW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetACP
GetModuleHandleW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
EncodePointer
RtlUnwind
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetCPInfo
CreateProcessW
SetUnhandledExceptionFilter
SetLastError
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
IsProcessorFeaturePresent
LCMapStringW
ExitProcess
IsDebuggerPresent
GetCurrentThreadId
OutputDebugStringW
LoadLibraryExW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlushFileBuffers
SetFilePointerEx
IsValidCodePage
GetOEMCP
SetStdHandle
FreeLibrary
FormatMessageA
GetModuleHandleA
LoadLibraryW
CloseHandle
WaitForSingleObject
UnhandledExceptionFilter
GetProcAddress
LoadLibraryExA
shell32
SHGetFolderPathW
ws2_32
ntohl
advapi32
CryptDestroyKey
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptReleaseContext
CryptDestroyHash
CryptVerifySignatureW
ole32
CoTaskMemFree
StringFromCLSID
CoCreateGuid
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ