Static task
static1
Behavioral task
behavioral1
Sample
10c0717640e7e081b65d138a3d421089.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10c0717640e7e081b65d138a3d421089.exe
Resource
win10v2004-20231215-en
General
-
Target
10c0717640e7e081b65d138a3d421089
-
Size
440KB
-
MD5
10c0717640e7e081b65d138a3d421089
-
SHA1
836b5af0aa9d0aa5c787062c055184fee43a71d8
-
SHA256
d534c15c9f87c6d4e9616a6fd48c551baf093501a94818a1be3e6fe7a14d3045
-
SHA512
a9ffbdc5cdc152831f1fbe07473fe333b22ec9bc38d5d201387f7206a79187f5736c2f7f038f6c13404addcf711a81c2926e048be61f86146c5901b710fc4199
-
SSDEEP
12288:T1RRZpa8DwxFyqYaHSW4zLWseS1Z6g2NBnEsD:RbJ0eqeW4uMZ6g2NBnE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10c0717640e7e081b65d138a3d421089
Files
-
10c0717640e7e081b65d138a3d421089.exe windows:4 windows x86 arch:x86
90cc7c4350f0834a2804e09b87fde297
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
FtpCommandW
ResumeSuspendedDownload
InternetGetCookieW
FindNextUrlCacheEntryExW
FtpSetCurrentDirectoryA
InternetGetLastResponseInfoW
FreeUrlCacheSpaceA
InternetTimeFromSystemTimeW
InternetShowSecurityInfoByURLW
CommitUrlCacheEntryA
FindFirstUrlCacheEntryA
FindFirstUrlCacheEntryExA
ReadUrlCacheEntryStream
HttpSendRequestW
comdlg32
GetOpenFileNameA
ReplaceTextA
PageSetupDlgA
user32
FindWindowExW
GetMessagePos
OemToCharW
GetDlgItemTextA
CloseWindowStation
GetPropW
SetWindowPos
OpenInputDesktop
FrameRect
ReleaseDC
advapi32
RegConnectRegistryA
CryptDecrypt
CryptHashData
DuplicateTokenEx
CryptDuplicateHash
CryptSignHashW
CryptGetUserKey
CryptSetProvParam
RegCloseKey
RegEnumKeyExA
InitiateSystemShutdownW
RegQueryValueExA
LookupPrivilegeValueW
LookupSecurityDescriptorPartsA
CreateServiceW
RegReplaceKeyW
CryptSignHashA
kernel32
CompareStringW
TerminateProcess
GlobalAddAtomW
RtlUnwind
CreateNamedPipeA
IsDebuggerPresent
GetComputerNameW
GetStringTypeW
LoadLibraryA
GetFileType
GetLocaleInfoW
SetHandleCount
IsValidLocale
SetLastError
TlsFree
TlsAlloc
GetTimeZoneInformation
LCMapStringA
GetStartupInfoA
HeapReAlloc
ExitProcess
FreeEnvironmentStringsA
GetPrivateProfileIntW
GetCurrentProcessId
GetPrivateProfileIntA
GetModuleFileNameA
HeapDestroy
HeapSize
QueryPerformanceCounter
CompareStringA
EnumSystemLocalesA
WideCharToMultiByte
SetEnvironmentVariableA
GetCurrentThreadId
GetProcAddress
GetLastError
GetStringTypeA
VirtualFree
FreeEnvironmentStringsW
GetCurrentThread
TlsGetValue
GetTickCount
GetModuleHandleW
EnterCriticalSection
GetFileAttributesExW
GetCPInfo
HeapCreate
LCMapStringW
GetModuleHandleA
WriteFile
GetDateFormatA
LeaveCriticalSection
SetConsoleCtrlHandler
Sleep
MultiByteToWideChar
VirtualAlloc
GetStdHandle
InterlockedDecrement
GetCurrentProcess
FreeLibrary
HeapAlloc
InterlockedExchange
SetUnhandledExceptionFilter
IsValidCodePage
UnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapFree
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
GetLocaleInfoA
GetCommandLineA
GetOEMCP
VirtualQuery
GetACP
InterlockedIncrement
GetTimeFormatA
DeleteCriticalSection
TlsSetValue
EnumResourceTypesW
GetUserDefaultLCID
GetEnvironmentStrings
Sections
.text Size: 151KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ