Static task
static1
Behavioral task
behavioral1
Sample
101d00e77b48685bc02c1ff9672e1e94.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
101d00e77b48685bc02c1ff9672e1e94.exe
Resource
win10v2004-20231222-en
General
-
Target
101d00e77b48685bc02c1ff9672e1e94
-
Size
43KB
-
MD5
101d00e77b48685bc02c1ff9672e1e94
-
SHA1
7ce620be6bb66cb76a37e71d6aec55c21c9dd109
-
SHA256
15a1022a41f3d9fe857581525b95d0367e4172e63d907555c6ad12c9fb4a97d1
-
SHA512
cefe82671439fb6b68bc45d9057328a782ab557e7720727fb5266fc90a11829e921bb9cc7e007872fc8adbbef0ac62c51998c20f91c4adf68ac69163cb616e8e
-
SSDEEP
768:q9JC8gV4JXx/lYYNUirN9X0kAxWSEsRAVA2blscyJu1PZ8f8E5yYqdVcQh:q9JyVYio9X0AbOAVLscSmPSf822
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101d00e77b48685bc02c1ff9672e1e94
Files
-
101d00e77b48685bc02c1ff9672e1e94.exe windows:5 windows x86 arch:x86
7abdafe83f887bf3c1003ed016a22a39
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
GetTempPathW
SetLastError
SetEndOfFile
CopyFileW
FindFirstFileW
WriteFile
lstrcatW
DisconnectNamedPipe
ExpandEnvironmentStringsW
lstrcmpiA
CreateEventW
CreateMutexW
OpenProcess
GetCommandLineA
CloseHandle
GetSystemTime
FindClose
SetFileAttributesW
lstrlenA
ReleaseMutex
GetDriveTypeW
HeapAlloc
CreateThread
EnterCriticalSection
UnmapViewOfFile
GlobalLock
GetTimeZoneInformation
SetFileTime
GetModuleHandleA
Sections
.fqlgb Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.boxqt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.epej Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ