Static task
static1
Behavioral task
behavioral1
Sample
1b633cee02f0269d309a16946c7b9422.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1b633cee02f0269d309a16946c7b9422.exe
Resource
win10v2004-20231215-en
General
-
Target
1b633cee02f0269d309a16946c7b9422
-
Size
8KB
-
MD5
1b633cee02f0269d309a16946c7b9422
-
SHA1
52d9b7eaa87db3bf5874d9c27305b618d62591dc
-
SHA256
afca5ab7239c233ff8377c2861ebe61f1e0ab29cfdf4c3c64fd32f70136c9bdd
-
SHA512
46cf8147dcc43d8a5b872746fe87069aa5b44ea734c3978805343fb07347a6041405bdac77b93f63bac359545b7e524e79d6ed2c904025fab2986ab08cd86f6f
-
SSDEEP
192:u/1oLR4jm9c2cpxCP1oyn6g6/lpiKUpt:u/aL3c2cpS1yfiDp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1b633cee02f0269d309a16946c7b9422
Files
-
1b633cee02f0269d309a16946c7b9422.exe windows:4 windows x86 arch:x86
33f31dead657e9d802f27b78c9fef571
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
CreateFileA
GetStartupInfoA
GetFileSize
ReadFile
GetModuleFileNameA
GetProcAddress
CloseHandle
user32
MessageBoxA
advapi32
RegOpenKeyA
RegCloseKey
RegQueryValueExA
msvcrt
_initterm
strcpy
malloc
strlen
free
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
realloc
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 886B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ