Static task
static1
Behavioral task
behavioral1
Sample
184301fefa76b5096f1f9a0c15525711.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
184301fefa76b5096f1f9a0c15525711.exe
Resource
win10v2004-20231215-en
General
-
Target
184301fefa76b5096f1f9a0c15525711
-
Size
18KB
-
MD5
184301fefa76b5096f1f9a0c15525711
-
SHA1
a8afb798940ed3bfc9b73f34f19a376da5ee966d
-
SHA256
4c021296434a69b70ce79d54c3b8bba9913d7f87b03e197429fe30929bbb75fd
-
SHA512
e32d4735dd098ea305b380fcfcee821e064b5068e784d67ec56bdce9d695eb9a44c23ca0fa7d140209b16798818044fb63dd9911575e21583bfa027344f44521
-
SSDEEP
384:QsN0v8IvDfU6q6W2u2XA5zqTb5LR+VRPki3mDtp6utl6:rN0RvzU6ZW27A5zqTbT+zPki3m5p6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 184301fefa76b5096f1f9a0c15525711
Files
-
184301fefa76b5096f1f9a0c15525711.exe windows:1 windows x86 arch:x86
4f8841a0306ac82fcc0f51e61c3fc47e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputA
FillConsoleOutputCharacterA
CreateMutexA
GetModuleHandleA
CreateMailslotW
GetCurrentDirectoryA
CopyFileW
PeekConsoleInputW
GetStartupInfoW
GetConsoleAliasExesLengthA
CallNamedPipeA
ExpungeConsoleCommandHistoryW
UpdateResourceA
user32
EnumWindowStationsA
ModifyMenuW
ModifyMenuW
OpenWindowStationA
OemToCharW
IsDialogMessageA
EnumDesktopsW
IsCharLowerA
GetKeyNameTextW
gdi32
PolyTextOutA
CreateFontA
CopyMetaFileW
GetLogColorSpaceW
CopyEnhMetaFileW
Sections
.tls Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icode Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 882B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ