time
Static task
static1
Behavioral task
behavioral1
Sample
10e1612da3c456d93dbc9968433e8d0f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10e1612da3c456d93dbc9968433e8d0f.exe
Resource
win10v2004-20231215-en
General
-
Target
10e1612da3c456d93dbc9968433e8d0f.exe
-
Size
15KB
-
MD5
10e1612da3c456d93dbc9968433e8d0f
-
SHA1
4d7155763784af1d45b9526bb6c14c5894262376
-
SHA256
f48a041cd709cd8c9b38cc4e220faddd4065da4c42065c1f27cce06cca2d91cd
-
SHA512
6c196a028305b892b70fea1205e491bc844b4fef3b160b5d5ccc86855b2de166554d8504edc036bfa30c7e09d978ac7d8c689e57674cb68f026545f2d35b11ae
-
SSDEEP
384:B/lu8ge5CnTPZBmMIIOz5R761Q3ay816O80f6aP:B/Yk5CjZsMIIOmzRbf3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10e1612da3c456d93dbc9968433e8d0f.exe
Files
-
10e1612da3c456d93dbc9968433e8d0f.exe.exe windows:4 windows x86 arch:x86
b4ee25fb1d1e45a233096e772d60df13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
listen
accept
inet_addr
bind
WSAStartup
gethostbyname
socket
setsockopt
htons
inet_ntoa
connect
WSAGetLastError
closesocket
select
__WSAFDIsSet
send
recv
shutdown
kernel32
DeleteCriticalSection
InitializeCriticalSection
GetTickCount
GetCurrentProcessId
CreateThread
GetCommandLineA
CreateMutexA
GetLastError
GetCurrentThreadId
Sleep
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
msvcrt
_snprintf
rand
realloc
atoi
strchr
strstr
_time64
_fullpath
free
sscanf
strncpy
srand
strtok
malloc
strrchr
sprintf
exit
gmtime
strncmp
isdigit
_strrev
Exports
Exports
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE