Static task
static1
Behavioral task
behavioral1
Sample
0fac6fdfcef9bf9f6d1796502dd7d820.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0fac6fdfcef9bf9f6d1796502dd7d820.exe
Resource
win10v2004-20231215-en
General
-
Target
0fac6fdfcef9bf9f6d1796502dd7d820
-
Size
18KB
-
MD5
0fac6fdfcef9bf9f6d1796502dd7d820
-
SHA1
5e0f3a15341e706df575745ce3214fc026c29e83
-
SHA256
8fb1eae85cf7a9e01dd38ad74e5875d161f734d0ba7061bc3e3109a03f36c935
-
SHA512
e3015f3214c47420b2c14e9b8d9cded05c9b4a51043ff61414629ab836207339b36ee0a7547b50d1070fe64d592196c8d2fa0c33e03b016ff72d0c5e2df2b6aa
-
SSDEEP
192:6O8P+/tZR972XeNvx0Up7343DYl3B6fuWxvv6QpjjNajxrB6gctI5uTh8ZMf24o8:6m99yqS3DYlEf9NJaKg8njFgS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0fac6fdfcef9bf9f6d1796502dd7d820
Files
-
0fac6fdfcef9bf9f6d1796502dd7d820.exe windows:4 windows x86 arch:x86
6745e7fd93f7a5bd0af278919f7cf91a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetAtomNameA
VirtualProtect
lstrlenA
GetTickCount
GetStdHandle
GetConsoleCP
GetVersion
GetSystemDefaultLangID
CloseHandle
HeapReAlloc
LoadLibraryExA
CompareFileTime
SetConsoleCP
GetModuleHandleA
GetCommandLineA
HeapCreate
SuspendThread
WaitForMultipleObjects
WaitForSingleObject
GlobalUnlock
user32
DragDetect
CreateMenu
FillRect
CreateIcon
DialogBoxParamA
IsDialogMessage
SetPropA
GetDlgItem
DispatchMessageA
SetScrollInfo
GetKeyState
DrawCaption
InsertMenuA
GetCursorInfo
InvertRect
DestroyMenu
GetKeyboardLayout
FindWindowA
SetWindowPos
DragObject
winmm
auxSetVolume
auxGetVolume
CloseDriver
PlaySoundA
OpenDriver
version
VerQueryValueA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ