Static task
static1
Behavioral task
behavioral1
Sample
22542ad20b7631c29f564d4eb433e66f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22542ad20b7631c29f564d4eb433e66f.exe
Resource
win10v2004-20231215-en
General
-
Target
22542ad20b7631c29f564d4eb433e66f
-
Size
68KB
-
MD5
22542ad20b7631c29f564d4eb433e66f
-
SHA1
48841f5f70562e47a4b4f562e12ba916d17ae442
-
SHA256
539c51e60451930eceec489d4ee11612e130da0bc3ac9d7e57f2cba5a0fa6562
-
SHA512
39a59c0209f0ec25a68e58cd2a1d0d94df27ca5d14750831139002766008f48d7347b98723c96dd7d55871a269432d3f50ccd3b2612d349f5048e28a3e1a2220
-
SSDEEP
768:snkpTBPJn72Jh/w0LF6olcsEpizSA9d9tRDw2B0S1:s8f72Jh/MolopizSA9dfRDw2L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22542ad20b7631c29f564d4eb433e66f
Files
-
22542ad20b7631c29f564d4eb433e66f.exe windows:4 windows x86 arch:x86
4f5c6eb2e577003d67473ac2d4ca3f25
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE