Static task
static1
Behavioral task
behavioral1
Sample
22a0e458ebf0108c1c83b6c2f8fdc26f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22a0e458ebf0108c1c83b6c2f8fdc26f.exe
Resource
win10v2004-20231215-en
General
-
Target
22a0e458ebf0108c1c83b6c2f8fdc26f
-
Size
28KB
-
MD5
22a0e458ebf0108c1c83b6c2f8fdc26f
-
SHA1
8e2b70bbd0c950a4b75020b541ecb8abab5b626e
-
SHA256
264a3a30e05ac43a3dedffa06058552de4d6d29cd303082db02b31a7235c5cd1
-
SHA512
5cc25f4245a37937da1228d25620b7d5c856f869d024f779fae7ace534ef25740a110646d62bc4b0fe9327adff72b89fb9160ca1338318e6a90f7c93928a1f9b
-
SSDEEP
384:G+S8SmlUxoEQ0nSpBATiyd4yyGrmarDo2Gz:7toQ0jiyOyjrprDo2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22a0e458ebf0108c1c83b6c2f8fdc26f
Files
-
22a0e458ebf0108c1c83b6c2f8fdc26f.exe windows:4 windows x86 arch:x86
62a23425da01ae953f61de1f98df117e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CreateThread
WaitForSingleObject
GetVersion
TerminateProcess
GetCurrentProcess
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
LoadLibraryA
LCMapStringA
GetOEMCP
GetACP
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
Sleep
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetEnvironmentStrings
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
user32
GetWindowRect
ReleaseDC
FindWindowExA
FindWindowA
SetWindowPos
GetDC
DestroyWindow
CreateWindowExA
MessageBoxA
gdi32
SetBkMode
DeleteObject
GetDeviceCaps
CreateFontIndirectA
SetTextAlign
SetTextColor
TextOutA
EnumFontFamiliesExA
SelectObject
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE