Static task
static1
Behavioral task
behavioral1
Sample
0ec349d2b3ab65d34d6947398288099f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0ec349d2b3ab65d34d6947398288099f.exe
Resource
win10v2004-20231222-en
General
-
Target
0ec349d2b3ab65d34d6947398288099f.exe
-
Size
344KB
-
MD5
0ec349d2b3ab65d34d6947398288099f
-
SHA1
384f18c5355499971ddd24b0528d74d069326ead
-
SHA256
c46416ad128c4f013fd49b21d23d97a7a0e6d397906d63272c75b86610bc6daf
-
SHA512
acf9fb93ae131158157860f546f0ced3902ca605e4f0438f4335df9c9613335e9f2c6d59ce7bca8c83bccdf37970780a9331d133c68e567ed9a5c627da62cecd
-
SSDEEP
6144:brOYeg8hY2Uw/M9sKBsEhPSVqW6kti4zDDcyMHKi4OTxXVmev+2nrY2OM5t:W7g8hYLa/4SVN6EzPcyMHKBOTxlmev+X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ec349d2b3ab65d34d6947398288099f.exe
Files
-
0ec349d2b3ab65d34d6947398288099f.exe.exe windows:4 windows x86 arch:x86
b5cb147a043775fa995dbb94670cd866
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
GetLastError
GetModuleHandleA
VirtualProtectEx
GetTempPathA
GetProcAddress
advapi32
ConvertSidToStringSidW
avifil32
CreateEditableStream
winmm
midiInClose
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 188KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ