Static task
static1
Behavioral task
behavioral1
Sample
142519430c905d7a890c08a2a0170ca3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
142519430c905d7a890c08a2a0170ca3.exe
Resource
win10v2004-20231215-en
General
-
Target
142519430c905d7a890c08a2a0170ca3
-
Size
33KB
-
MD5
142519430c905d7a890c08a2a0170ca3
-
SHA1
6c01bb8e81f91e5490427dbb4f6fe0a9f2e4b28f
-
SHA256
d066fd67973358830ec6b0661b0b3f6062dfb792f7b947e5a48dd38ee1f7a610
-
SHA512
cd337aa92e4c8278bdd239cef8300c28d719bca9cae1e1ef6718765e48c6ed3adb2090b98ac910bedbf862f1025e34b47cd517b868ee4ce3d778c8286bb94a9b
-
SSDEEP
768:VwH6F9ru1DO4X1IXvQQXGKdEIUfn1o5sGjAhR760+LLz:VwH89rutK4DIUvCKCLL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 142519430c905d7a890c08a2a0170ca3
Files
-
142519430c905d7a890c08a2a0170ca3.exe windows:4 windows x86 arch:x86
af7fdb9ebf2cb69a553a3b994499fc16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleWindow
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetDateFormatW
msvcrt
_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf
shell32
DragQueryFileAorW
StrStrIA
DuplicateIcon
Sections
.text Size: 20KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE