Static task
static1
Behavioral task
behavioral1
Sample
10dcb92c13a6a588fab47ca57141a447.exe
Resource
win7-20231215-en
General
-
Target
10dcb92c13a6a588fab47ca57141a447
-
Size
216KB
-
MD5
10dcb92c13a6a588fab47ca57141a447
-
SHA1
f28d4a99c744703efa22787a4c7f04b18a265d87
-
SHA256
cbc0d227773e7f5a97e3c4486244738dbeaceac6cc71fd78f03efbac2310bb68
-
SHA512
e57f6d61969cf23cc0b57629386ca2441b2c7809e45b3b6184d3246b3bcd063155ff823aa1be7ced104e859825a7756b459f21e8e28197341525a118fef0c2ed
-
SSDEEP
3072:AkTVlvEiEnYLoH1Eoj6bVgmEUVtWW7RJbBTSwVv4PJxoBOmxKSfxuTbpVuVlJUMB:AfrQsmojABJVtWkJtpVv4RxoEY5yp1Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 10dcb92c13a6a588fab47ca57141a447
Files
-
10dcb92c13a6a588fab47ca57141a447.exe windows:4 windows x86 arch:x86
75918da8b6b693f33c8bb3b771acfadf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
LockResource
SizeofResource
FlushFileBuffers
VirtualFree
LoadLibraryA
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
ResetEvent
LocalFree
VirtualLock
PulseEvent
FindFirstFileA
CreateFileA
LocalAlloc
FileTimeToLocalFileTime
ExitProcess
TerminateThread
ResumeThread
VirtualQuery
LeaveCriticalSection
GetLastError
MoveFileA
VirtualProtectEx
GetProcessHeap
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
GetVersionExA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemInfo
user32
LoadCursorA
CreateWindowExA
GetTopWindow
UpdateWindow
msvfw32
DrawDibDraw
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ