Static task
static1
Behavioral task
behavioral1
Sample
2ceb6154c18b511ad737d3f74f0f6e93.exe
Resource
win7-20231215-en
General
-
Target
2ceb6154c18b511ad737d3f74f0f6e93
-
Size
874KB
-
MD5
2ceb6154c18b511ad737d3f74f0f6e93
-
SHA1
bcb8c6d861a0f40b27af0562912cceb638f949e6
-
SHA256
55ca102b851eca4ab52f54d4236735837cca03da3db0be332d85eef5acb54635
-
SHA512
d49931e488dc09472e69c39e1e37c71b9d92e595eb24276b67a0eef5f9f007b8a8cc4b0dc6e178a9c27f7a6d8dea88244d98c1593ae935449973363dba085bd3
-
SSDEEP
24576:nEhkOlz3WYm7si1s3QvkTlgBi/HmJEx+VBf:nEN3pBVliOVx+L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ceb6154c18b511ad737d3f74f0f6e93
Files
-
2ceb6154c18b511ad737d3f74f0f6e93.exe windows:5 windows x86 arch:x86
bd59b9bcaed156d2d7a40f141fa706b9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
FindClose
FindNextFileA
GetTempPathA
GetFullPathNameW
GetFullPathNameA
CreateFileA
GetFileSize
SetFilePointer
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
FreeLibrary
QueryPerformanceCounter
InterlockedCompareExchange
UnlockFile
LockFile
GetTickCount
UnlockFileEx
GetSystemTimeAsFileTime
FormatMessageA
WriteFile
InitializeCriticalSection
WideCharToMultiByte
LoadLibraryW
Sleep
FormatMessageW
GetVersionExW
LeaveCriticalSection
GetFileAttributesA
GetFileAttributesW
ReadFile
CreateFileW
MultiByteToWideChar
FlushFileBuffers
GetTempPathW
GetLastError
GetProcAddress
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
CreateFileMappingW
GetDiskFreeSpaceA
GetSystemInfo
GetFileAttributesExW
DeleteCriticalSection
CloseHandle
DeleteFileW
GetCurrentProcessId
LocalFree
GetSystemTime
AreFileApisANSI
DeleteFileA
SetEnvironmentVariableA
CompareStringW
GetUserDefaultLCID
GetStringTypeExA
LCMapStringA
LCMapStringW
InterlockedExchange
SetLastError
SleepEx
WaitForSingleObject
ExpandEnvironmentStringsA
HeapFree
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetFileType
HeapAlloc
DecodePointer
EncodePointer
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
RtlUnwind
GetDriveTypeA
FindFirstFileExA
ExitThread
GetCurrentThreadId
CreateThread
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
SetStdHandle
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetStdHandle
GetModuleHandleW
ExitProcess
GetModuleFileNameW
GetTimeZoneInformation
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetCurrentDirectoryW
GetConsoleCP
GetConsoleMode
GetDriveTypeW
GetProcessHeap
WriteConsoleW
shell32
SHGetSpecialFolderPathA
user32
LoadStringA
ws2_32
WSACleanup
WSAStartup
WSAGetLastError
closesocket
socket
recv
send
getsockname
ntohs
bind
htons
getsockopt
getpeername
setsockopt
connect
WSASetLastError
freeaddrinfo
getaddrinfo
__WSAFDIsSet
select
ioctlsocket
gethostname
Sections
.text Size: 745KB - Virtual size: 745KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ