Static task
static1
Behavioral task
behavioral1
Sample
13ba73f8c8f3042031335c5bc7e1c92c.exe
Resource
win7-20231215-en
General
-
Target
13ba73f8c8f3042031335c5bc7e1c92c
-
Size
286KB
-
MD5
13ba73f8c8f3042031335c5bc7e1c92c
-
SHA1
7c1c7fd5f1915d9b53beaac25d112255dce3740f
-
SHA256
fce100cc9bacd86b396670b048dd77841c29df1f481a220894a2f4fbbcc33330
-
SHA512
1bda75960cc93780c362e6de1d7cd0eacce7ad4b894b8a8ef09ab700e114c978ad2272730c66fd119c36a50f0a19494339acd55e9c965cef3d2ad0079c190bfa
-
SSDEEP
6144:A8vBmiVlbbZPvIvjd3fvPMEysJ9ksxOwFR8/S27O9Yw7:e2xPvI7Bv7vGK+I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 13ba73f8c8f3042031335c5bc7e1c92c
Files
-
13ba73f8c8f3042031335c5bc7e1c92c.exe windows:4 windows x86 arch:x86
8b08ed17c63a34b15d175e5c13846c12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
shlwapi
StrRetToStrA
SHCreateStreamOnFileEx
PathAppendA
PathIsContentTypeA
PathIsFileSpecA
PathCreateFromUrlW
oleacc
CreateStdAccessibleObject
kernel32
MulDiv
MultiByteToWideChar
CreateThread
FindAtomA
lstrcmpW
InitializeCriticalSection
Sleep
GlobalAlloc
WaitForSingleObject
LocalAlloc
FlushInstructionCache
GlobalLock
CloseHandle
LeaveCriticalSection
OpenProcess
InterlockedExchange
GlobalFree
GetSystemDirectoryW
SetLastError
GetLocaleInfoW
ProcessIdToSessionId
DeleteCriticalSection
GlobalHandle
WaitForMultipleObjects
EnumResourceLanguagesW
GetTickCount
HeapSetInformation
GlobalUnlock
EnterCriticalSection
GetCurrentProcess
InterlockedIncrement
GetStringTypeA
InterlockedDecrement
lstrlenA
FormatMessageW
GetComputerNameW
GetModuleFileNameW
RaiseException
GetProcessId
lstrlenW
CreateFileW
WideCharToMultiByte
Sections
.text Size: 145KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ