Static task
static1
Behavioral task
behavioral1
Sample
10ec3ee2fda39826cb546c419e18d6f6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10ec3ee2fda39826cb546c419e18d6f6.exe
Resource
win10v2004-20231222-en
General
-
Target
10ec3ee2fda39826cb546c419e18d6f6
-
Size
36KB
-
MD5
10ec3ee2fda39826cb546c419e18d6f6
-
SHA1
4ab0e73ea05c7427f16c8d415d331472c10d1743
-
SHA256
d3965124406909603388ced436bbedb249e078ec7319094b9f2b1a4d176cb2b7
-
SHA512
f34c930bc9ee4f93646ef82063608e6fd2fcdb2011ed46c46678018e35955c5cc119ab3abae2dc7fe27fb85bc6957dab6cda0455ecbe78d6743d627bc053b6ac
-
SSDEEP
384:LFb5rOyCVtBON0Ddl71vCIJayVyTSt+Sph+PBZoU4D6Wll:BI60ZlUYV7cSpwPM9eWll
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10ec3ee2fda39826cb546c419e18d6f6
Files
-
10ec3ee2fda39826cb546c419e18d6f6.exe windows:4 windows x86 arch:x86
0509ef96f14ebc0e388e46131b787838
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
LockResource
LoadResource
FindResourceW
CreateProcessW
GetWindowsDirectoryW
WriteFile
SizeofResource
CloseHandle
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
advapi32
RegSetValueExW
RegCloseKey
RegOpenKeyExW
Sections
.text Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53.5MB - Virtual size: 53.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ