Static task
static1
Behavioral task
behavioral1
Sample
14a2fbebb7689577531ba28dd0c017cd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14a2fbebb7689577531ba28dd0c017cd.exe
Resource
win10v2004-20231215-en
General
-
Target
14a2fbebb7689577531ba28dd0c017cd
-
Size
388KB
-
MD5
14a2fbebb7689577531ba28dd0c017cd
-
SHA1
b702fff1a712e10b68271b67f3006004b3a42831
-
SHA256
90d923ecf4724fb78d7655dd2b05751cc4236dccb771303da0e3922d89d97e84
-
SHA512
e2389bb6092907c9442ea646127f2e43776c3c4aa4d88edffd7123d713ec5aedb79074e6e45032221d1f08c2a969c79ef96347762c94b5880827531b91619d23
-
SSDEEP
12288:tIiuSRkVa3z6YNNqPjN4C9Yane68zysW:tIiuM0CN4PjNhYmedzys
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14a2fbebb7689577531ba28dd0c017cd
Files
-
14a2fbebb7689577531ba28dd0c017cd.exe windows:4 windows x86 arch:x86
daa33375c3d00b441e4f298f0d650f42
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
TerminateProcess
SetThreadLocale
GetModuleFileNameA
GetProcAddress
VirtualAlloc
HeapReAlloc
OutputDebugStringA
GetThreadLocale
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapAlloc
EnumCalendarInfoA
GetCurrentThreadId
GetCurrentProcess
GetModuleHandleA
EnterCriticalSection
CreateEventA
FindNextChangeNotification
InterlockedExchange
RtlUnwind
EnumSystemCodePagesW
QueryPerformanceCounter
VirtualQuery
LoadLibraryA
SetConsoleMode
GetPrivateProfileStringA
ReadFileEx
GetCurrentDirectoryW
ExitProcess
GetTickCount
OpenEventA
wininet
FtpCreateDirectoryW
InternetQueryOptionA
GopherFindFirstFileW
InternetQueryFortezzaStatus
HttpSendRequestExW
InternetGoOnlineW
GopherOpenFileA
InternetTimeToSystemTimeA
RetrieveUrlCacheEntryStreamA
RetrieveUrlCacheEntryStreamW
InternetGetConnectedState
InternetTimeToSystemTimeW
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 263KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ