Static task
static1
Behavioral task
behavioral1
Sample
dc0b802d12df5b93affc28c387f5ff5321eec742145703bf9da532150d1a8bc7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
dc0b802d12df5b93affc28c387f5ff5321eec742145703bf9da532150d1a8bc7.exe
Resource
win10v2004-20231215-en
General
-
Target
dc0b802d12df5b93affc28c387f5ff5321eec742145703bf9da532150d1a8bc7
-
Size
205KB
-
MD5
e9e728961738c30054128b28d17bbc87
-
SHA1
440ad634342792930cdc2e0cc116836db2c94333
-
SHA256
dc0b802d12df5b93affc28c387f5ff5321eec742145703bf9da532150d1a8bc7
-
SHA512
ed08f0bba3deb0eb1fc6694617d62f73a18ac5fe2e8114809012bc780be1712bafd905b8c18322c7db08b1ad5a7f15d3c802f94a0ebf07988e690e54431767de
-
SSDEEP
3072:9NHALoUjh6HPOdYd03wHXv4+aft5nMW4gq0qbB1p7Ztv5b:9NgL36yv3w3xgwbBFd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dc0b802d12df5b93affc28c387f5ff5321eec742145703bf9da532150d1a8bc7
Files
-
dc0b802d12df5b93affc28c387f5ff5321eec742145703bf9da532150d1a8bc7.exe windows:5 windows x86 arch:x86
5c2e113e85fc7cc965fc82cee6d4c168
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleOutputCharacterW
GetLocaleInfoA
WriteConsoleOutputCharacterA
InterlockedDecrement
QueryDosDeviceA
InterlockedCompareExchange
SetComputerNameW
GetComputerNameW
GetModuleHandleW
GetTickCount
GetCommConfig
VirtualFree
GetConsoleAliasesLengthA
GlobalFindAtomA
LoadLibraryW
SetConsoleMode
GetConsoleAliasW
GetWriteWatch
WriteConsoleW
FindFirstChangeNotificationW
SetThreadPriority
GetStartupInfoA
GetLastError
SetLastError
GetProcAddress
VirtualAlloc
SetFileAttributesA
InterlockedExchangeAdd
LocalAlloc
CreateHardLinkW
TransmitCommChar
AddAtomW
FindFirstVolumeMountPointA
IsDebuggerPresent
GetStringTypeW
GetCurrentProcessId
DeleteFileA
lstrcpyA
GetNativeSystemInfo
SetComputerNameExW
GetComputerNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
RaiseException
HeapFree
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetModuleHandleA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
HeapSize
gdi32
GetCharABCWidthsFloatW
WidenPath
Sections
.text Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ