Static task
static1
Behavioral task
behavioral1
Sample
0eceab5ed0b7a0607b963c72d74283a5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0eceab5ed0b7a0607b963c72d74283a5.exe
Resource
win10v2004-20231215-en
General
-
Target
0eceab5ed0b7a0607b963c72d74283a5
-
Size
364KB
-
MD5
0eceab5ed0b7a0607b963c72d74283a5
-
SHA1
d06640c94c7474a0eca751c02038cb8cfea02ca3
-
SHA256
715d34544f090e83e6ce9e87f4aceed153dab4b2f4e3dd0061988803649c4468
-
SHA512
0faf6a63bb297cbdecd1eefa923916b112f38733037e255c3be5f52ced982c77d17a84d57eaa6115cadffbdc6be2fed7de64e3b7bc09c9000eeff3c9ba1e7dfb
-
SSDEEP
6144:ieJTkfhDN9a/up3h194RomjgXyxbQvg0c8ytsMrXz0b1dw8Q5NBLVupY7+FkZCEo:iyqsuFh194xiyBQoj7qw8Q5NlVuO7ha9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eceab5ed0b7a0607b963c72d74283a5
Files
-
0eceab5ed0b7a0607b963c72d74283a5.exe windows:4 windows x86 arch:x86
51ef24cf30d074bdb3e701e2cd90de18
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetCommandLineA
Sleep
VirtualFree
HeapCreate
IsValidCodePage
WideCharToMultiByte
SizeofResource
GetVersion
GetModuleHandleW
GetACP
CloseHandle
ReadFile
GetModuleHandleA
MapViewOfFile
RaiseException
InterlockedCompareExchange
HeapSize
GetCurrentDirectoryA
LockResource
GetCurrentProcessId
WritePrivateProfileStringA
GetEnvironmentStrings
FileTimeToLocalFileTime
lstrlenW
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
FindResourceW
GetConsoleCP
lstrlenA
GetSystemInfo
SetStdHandle
GetLastError
InterlockedIncrement
ExitProcess
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
CreateEventW
GlobalLock
DuplicateHandle
FindNextFileA
CreateFileMappingA
CompareStringA
GlobalFree
lstrcmpA
CompareStringW
GetProcessHeap
GetProcAddress
GetFullPathNameA
SetErrorMode
DeleteFileA
LCMapStringW
GetFileSize
GetStartupInfoA
LoadLibraryA
FlushFileBuffers
TlsAlloc
GetTickCount
QueryPerformanceCounter
SetEvent
lstrcmpiA
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
LeaveCriticalSection
GetCurrentThreadId
SetEndOfFile
VirtualQuery
TerminateProcess
SetUnhandledExceptionFilter
CreateThread
SetFilePointer
CreateMutexA
GetLocalTime
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetModuleFileNameA
InterlockedExchange
GetVersionExA
HeapAlloc
IsDebuggerPresent
GetModuleFileNameW
GetEnvironmentVariableA
SetLastError
OutputDebugStringA
FormatMessageA
InterlockedDecrement
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
SetFileAttributesA
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
WriteFile
GetStringTypeA
GetCPInfo
FreeEnvironmentStringsW
ExpandEnvironmentStringsA
lstrcatA
LocalAlloc
GetLocaleInfoA
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetFileAttributesW
HeapDestroy
FindFirstFileW
WaitForSingleObject
GetFileAttributesA
GetConsoleOutputCP
GetStdHandle
TlsFree
GetCurrentThread
RtlUnwind
FatalAppExitA
GetOEMCP
IsBadWritePtr
SetConsoleCtrlHandler
GetStringTypeW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
SetEnvironmentVariableA
user32
SetCursor
GetClientRect
DrawTextA
wsprintfA
InvalidateRect
IsWindowVisible
GetKeyState
GetFocus
GetDesktopWindow
TrackPopupMenu
LoadCursorA
ClientToScreen
GetDlgItem
SetWindowTextA
EndDialog
SetWindowLongA
GetWindowRect
GetSystemMetrics
DefWindowProcA
KillTimer
BeginPaint
CreateWindowExA
RegisterClassA
EnableMenuItem
IsWindowEnabled
TranslateMessage
EnableWindow
ShowWindow
UpdateWindow
GetParent
DestroyWindow
SendMessageA
ReleaseDC
GetDC
PeekMessageA
DispatchMessageA
SetWindowPos
LoadBitmapA
PostQuitMessage
Sections
.text Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 273KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ