Static task
static1
Behavioral task
behavioral1
Sample
2814afcffd1f94d744f7c5d66218d695.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2814afcffd1f94d744f7c5d66218d695.exe
Resource
win10v2004-20231222-en
General
-
Target
2814afcffd1f94d744f7c5d66218d695
-
Size
128KB
-
MD5
2814afcffd1f94d744f7c5d66218d695
-
SHA1
06896db17c2067f22fd0e2a4d7e417dfa9980d6c
-
SHA256
4bd266f4494dad01245ef9c0d1389b21ca527fcd834bd1b5bc47e1a31043d673
-
SHA512
a4a3c7c28ce79b91d5169adc70f6ecb5c9d09b9d5871c93edb644a05bc43181d8e0facfeb1b28c6dbe0d00219fe5fcea8c810d5dfb70e06b57957fa96e962eb9
-
SSDEEP
3072:yiwCo1SdEhDMMPSIGa3M6oYPqjCuvKj6pFFi4Ha+l0bB2W2+:aCySdEhDMMPNGa3DjtuqgFZHR0bIa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2814afcffd1f94d744f7c5d66218d695
Files
-
2814afcffd1f94d744f7c5d66218d695.exe windows:4 windows x86 arch:x86
66c5abcb3d6e4fa353e40c66d9af4f3f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
ExitProcess
CloseHandle
lstrlenA
SetFileTime
LoadResource
lstrcpyA
lstrcmpiA
SetLastError
GetLastError
lstrcatA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
Process32First
CreateToolhelp32Snapshot
GetCurrentThreadId
Process32Next
GetModuleHandleA
SetUnhandledExceptionFilter
ReleaseMutex
CreateMutexA
GetCommandLineA
SetFileAttributesA
CreateDirectoryA
GetSystemDirectoryA
Sleep
CreateThread
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
msvcrt
malloc
__CxxFrameHandler
_CxxThrowException
_except_handler3
??3@YAXPAX@Z
strstr
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strchr
??2@YAPAXI@Z
sprintf
strtok
realloc
_strrev
Sections
PAGE Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ