Static task
static1
Behavioral task
behavioral1
Sample
10b67054ff8e7b895776adfa6d4ff512.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10b67054ff8e7b895776adfa6d4ff512.exe
Resource
win10v2004-20231222-en
General
-
Target
10b67054ff8e7b895776adfa6d4ff512
-
Size
680KB
-
MD5
10b67054ff8e7b895776adfa6d4ff512
-
SHA1
00b693e8acfd60cf0978eb81b081aca36d3bee3c
-
SHA256
3fec6b86d746362b59cb26e8311cd7d7142ccf6bec979826e57b4ba267638375
-
SHA512
c6dea9670135d674155fd5fd503110088284f4622bdd5f52208dddb913d512cba8c59118f5d063e388b103c8ee122a1696820b34cc3bdfd3a993db915c48695c
-
SSDEEP
12288:M3uM4+nKTGrBOoFqFfuO9WFU94HIYjPpgKVMBHVVFHNS6GHTxdck:Me+CGeQOh9+VjPpg3BHVzHNRk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10b67054ff8e7b895776adfa6d4ff512
Files
-
10b67054ff8e7b895776adfa6d4ff512.exe windows:5 windows x86 arch:x86
e52f8fc3e1a423f4bf0b7594819f81a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLocalTime
GetProcAddress
LoadLibraryA
SystemTimeToFileTime
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
CloseHandle
WaitForSingleObject
InitializeCriticalSection
lstrlenW
WideCharToMultiByte
MoveFileExW
GetTempFileNameW
GetTempPathW
DeleteFileW
MoveFileW
WriteFile
ReadFile
GetFileSize
CreateFileW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
SleepEx
SetFileAttributesW
CreateProcessW
GetModuleFileNameW
GetComputerNameA
Sleep
GetSystemTime
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
InitializeCriticalSectionAndSpinCount
LocalAlloc
WaitForMultipleObjects
VirtualQueryEx
ReadProcessMemory
Module32NextW
Module32FirstW
ProcessIdToSessionId
SetEndOfFile
WriteConsoleW
SetStdHandle
GetStringTypeW
GetCommandLineW
HeapSetInformation
GetStartupInfoW
RtlUnwind
ExitThread
GetCurrentThreadId
CreateThread
EncodePointer
DecodePointer
SetUnhandledExceptionFilter
ExitProcess
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
MultiByteToWideChar
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
FreeLibrary
InterlockedExchange
ole32
CoCreateInstance
CoInitialize
shell32
ShellExecuteW
SHGetSpecialFolderPathW
shlwapi
PathIsRootW
PathFileExistsW
PathRemoveExtensionW
PathAddExtensionW
PathAppendW
psapi
GetModuleFileNameExW
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
Sections
.text Size: 369KB - Virtual size: 369KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 232KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ