Static task
static1
Behavioral task
behavioral1
Sample
0cea6b3f312424e88f8e0825f3c380f0.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0cea6b3f312424e88f8e0825f3c380f0.exe
Resource
win10v2004-20231215-en
General
-
Target
0cea6b3f312424e88f8e0825f3c380f0
-
Size
227KB
-
MD5
0cea6b3f312424e88f8e0825f3c380f0
-
SHA1
cbde5ffb3afe2cc188751cba84ba8d5380b728ee
-
SHA256
eebb8983db149353ef22d95a29bdc75df41f23e1de4c575436d7de31013a5c4b
-
SHA512
a9f460818d1fde35fc53014950f716e3874523af3b56fc058fac16a35ce838b05c8b3252b3291f26af61728366846c18a3474bc94e1dd357e21643e3c252c87e
-
SSDEEP
6144:xIOpItuw28Bd7xFpExU3cv2LdUge11XDRL3qtg3p:xIO3w2mLpExIc+Laz1tDha
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0cea6b3f312424e88f8e0825f3c380f0
Files
-
0cea6b3f312424e88f8e0825f3c380f0.exe windows:4 windows x86 arch:x86
70f30e77bf0b6ad1b7ed5fe22455c10e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
BuildCommDCBA
BuildCommDCBAndTimeoutsW
ContinueDebugEvent
CreateNamedPipeW
DeleteFileW
EnumDateFormatsExW
EnumResourceTypesW
ExitProcess
FindFirstFileA
FreeEnvironmentStringsA
GetAtomNameW
GetCommTimeouts
GetFileInformationByHandle
GetNumberFormatW
GetOEMCP
GlobalAddAtomA
OpenProfileUserMapping
RequestWakeupLatency
SetCommTimeouts
SignalObjectAndWait
user32
AnimateWindow
BeginDeferWindowPos
BroadcastSystemMessageW
CharPrevExA
CheckMenuRadioItem
ClipCursor
CopyAcceleratorTableA
DdeCreateStringHandleW
EndDeferWindowPos
EndMenu
GetCapture
GetMenuInfo
RedrawWindow
RegisterClassExA
RegisterDeviceNotificationW
ScrollWindow
SendInput
SetKeyboardState
SetScrollPos
SetSysColors
SetWindowWord
SetWindowsHookW
ShowWindowAsync
mouse_event
gdi32
CloseMetaFile
ColorMatchToTarget
CreateFontIndirectW
CreateMetaFileA
DeleteObject
DescribePixelFormat
EndDoc
EnumICMProfilesW
GdiPlayJournal
GetBkColor
GetEnhMetaFileHeader
GetMetaFileBitsEx
GetMetaRgn
GetPixelFormat
GetROP2
GetRgnBox
GetTextExtentPointW
GetViewportExtEx
GetWindowExtEx
OffsetWindowOrgEx
PlayMetaFile
PolyTextOutA
RestoreDC
SetAbortProc
SetColorSpace
SetEnhMetaFileBits
SetTextColor
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 225KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ