Static task
static1
Behavioral task
behavioral1
Sample
a721c22e0362ab5634aaaf7137e28cda38e63e8ca24d4066be10288fae6ba0ba.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a721c22e0362ab5634aaaf7137e28cda38e63e8ca24d4066be10288fae6ba0ba.exe
Resource
win10v2004-20231215-en
General
-
Target
a721c22e0362ab5634aaaf7137e28cda38e63e8ca24d4066be10288fae6ba0ba
-
Size
480KB
-
MD5
72a162c839cfd724f387821e7b224b9f
-
SHA1
a4eeedf30f4e6202686130a535f306805a455ecb
-
SHA256
a721c22e0362ab5634aaaf7137e28cda38e63e8ca24d4066be10288fae6ba0ba
-
SHA512
3a95c670156021776795b32c9a7fb9e50833b98ed8e7002eb79547746729dc147a210251f026c9cdc60d173edd0228a2013d729671787a92c918a1fe42a973d7
-
SSDEEP
6144:f+gZgZS/GpDk9oaR1ZUa0qIOGxyc9sZ/lsH6khWS8P+nYPom6lJUNULrF7mrV:+Q6Co4wOT/Z/lsH5Iil2ULrF7m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a721c22e0362ab5634aaaf7137e28cda38e63e8ca24d4066be10288fae6ba0ba
Files
-
a721c22e0362ab5634aaaf7137e28cda38e63e8ca24d4066be10288fae6ba0ba.exe windows:4 windows x86 arch:x86
b2d9798e451ab6f77dc234527cdcfe23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
GetSystemInfo
IsBadReadPtr
GetProcAddress
LoadLibraryA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
ReadFile
SetStdHandle
GetOEMCP
GetACP
IsBadCodePtr
GetCPInfo
SetUnhandledExceptionFilter
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
HeapFree
HeapReAlloc
RtlUnwind
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RaiseException
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
user32
EndDialog
DefWindowProcA
DestroyWindow
DialogBoxParamA
BeginPaint
GetClientRect
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 388KB - Virtual size: 386KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ