Static task
static1
Behavioral task
behavioral1
Sample
0ebc31ffc97fd45d8ef7891fed7b89e3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0ebc31ffc97fd45d8ef7891fed7b89e3.exe
Resource
win10v2004-20231215-en
General
-
Target
0ebc31ffc97fd45d8ef7891fed7b89e3
-
Size
467KB
-
MD5
0ebc31ffc97fd45d8ef7891fed7b89e3
-
SHA1
ded28acd6fd300eb8e32fe8e8a2c42ee3d10e173
-
SHA256
602ca1e750dd5213781c6d77ebc8bfbac4c469493f1d4b658e0d039e74606e17
-
SHA512
c19bb1c83c1cadc517fc79b269ca7441c30ef7bbce6db8dad9524e8f7ad6fc0dc92f64445be99b5aa8c7e674464fe8c7a95877328293b3b4cd826fa6396717aa
-
SSDEEP
12288:25DjNGd3QyLb3VLvMFkWNiuYFwAqW6JDYAbEvCl:254KkWHcAbEKl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ebc31ffc97fd45d8ef7891fed7b89e3
Files
-
0ebc31ffc97fd45d8ef7891fed7b89e3.exe windows:5 windows x86 arch:x86
2e5fa7215a2d8a01c7b4f887adc74dd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
CompareStringW
CompareStringA
FlushFileBuffers
LoadLibraryA
GetProcAddress
GetSystemDirectoryA
lstrcatA
FreeLibrary
CreateFileA
GetFileSize
CloseHandle
SetFilePointer
ReadFile
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetCurrentProcessId
GetLastError
GetModuleFileNameA
GetModuleHandleA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
RtlUnwind
RaiseException
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetEnvironmentVariableA
GetCurrentThreadId
InterlockedDecrement
HeapAlloc
Sleep
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetTimeZoneInformation
HeapSize
InitializeCriticalSectionAndSpinCount
LCMapStringA
MultiByteToWideChar
LCMapStringW
user32
PostQuitMessage
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
RegisterClassExA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer
Sections
.text Size: 380KB - Virtual size: 379KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE