Static task
static1
Behavioral task
behavioral1
Sample
0eb99e0e3b8d70d5733ba9a3357d7693.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0eb99e0e3b8d70d5733ba9a3357d7693.exe
Resource
win10v2004-20231215-en
General
-
Target
0eb99e0e3b8d70d5733ba9a3357d7693
-
Size
326KB
-
MD5
0eb99e0e3b8d70d5733ba9a3357d7693
-
SHA1
e4ee18b6286e13e0f9f2420c7b1e0800b15a8569
-
SHA256
cfe1aa51762afbae87d0b8204ac6ad784c42852f05b0024725c08be26d94ac11
-
SHA512
241921cb98c2c0d4b0c356970464752530d8e39e315974fa95587026c4db6ecc04e10b5452c40e7fe2e714bc3e7d7227d221eefaf51f66f8d64cd9267723b19a
-
SSDEEP
6144:pZ8SMTo4c0L0kYemn0+cjH/+3byw8GmXETBjl7xAO1EBX2IWgq:pZ8hAPc/+3XTVl7xcGIWg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eb99e0e3b8d70d5733ba9a3357d7693
Files
-
0eb99e0e3b8d70d5733ba9a3357d7693.exe windows:4 windows x86 arch:x86
005eded53f3e7b152b79d9aa90dab76d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
PostQueuedCompletionStatus
GetFileType
CreateHardLinkW
SetFileValidData
CancelIo
GetModuleFileNameW
GetModuleHandleW
FindFirstFileExW
SetFileApisToOEM
ReadFile
GetFileAttributesW
WriteFileGather
MoveFileWithProgressW
GetFileSizeEx
GetFullPathNameW
GetBinaryTypeW
SystemTimeToFileTime
GetSystemTime
FindNextFileW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTempFileNameW
MoveFileW
FlushFileBuffers
GetFileSize
CreateFileA
SetFileShortNameW
GetFileTime
GetModuleFileNameA
AreFileApisANSI
CreateIoCompletionPort
CopyFileExW
FindClose
SetFileAttributesW
GetTempPathW
WriteFileEx
CreateFileMappingW
TerminateProcess
UnmapViewOfFile
Sleep
GetFileAttributesExW
SearchPathW
ReadFileScatter
LockFile
GetQueuedCompletionStatus
GetProcAddress
LoadLibraryA
SetEndOfFile
GetFileInformationByHandle
WinExec
DeleteFileW
SearchPathA
GetShortPathNameA
DeleteFileA
GetSystemDirectoryW
ExitProcess
FindFirstFileW
WideCharToMultiByte
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
MultiByteToWideChar
GetLastError
CreateMutexW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetTickCount
MapViewOfFile
CreateFileW
UnlockFileEx
MapViewOfFileEx
SetFilePointerEx
SetFilePointer
WriteFile
CloseHandle
GetLongPathNameW
ReadFileEx
ReplaceFileW
CopyFileW
MoveFileExW
LockFileEx
SetFileTime
GetShortPathNameW
UnlockFile
GetCompressedFileSizeW
OpenFileMappingW
FlushViewOfFile
SetFileApisToANSI
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
GetConsoleMode
GetConsoleCP
RaiseException
HeapSize
GetStdHandle
HeapCreate
HeapAlloc
HeapFree
RtlUnwind
ExitThread
ResumeThread
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
GetProcessHeap
GetStartupInfoW
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
user32
GetClientRect
GetWindowDC
ReleaseDC
GetDesktopWindow
GetWindowRect
RedrawWindow
DrawTextW
UpdateWindow
GetDC
GetWindowTextW
RegisterClassExW
ShowWindow
LoadCursorW
SetTimer
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
DefWindowProcW
KillTimer
PostQuitMessage
BeginPaint
EndPaint
CreateWindowExW
gdi32
SetBkMode
SetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
GetDIBits
DeleteDC
CreatePen
SelectObject
CreateSolidBrush
Rectangle
DeleteObject
SetDIBitsToDevice
CreateFontW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
SetFileSecurityW
RegCreateKeyExW
shell32
SHGetFolderPathA
rpcrt4
UuidCreate
RpcStringFreeW
UuidToStringW
wininet
InternetReadFile
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetOpenW
InternetCrackUrlW
InternetCloseHandle
Sections
.text Size: 215KB - Virtual size: 214KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ