Static task
static1
Behavioral task
behavioral1
Sample
453525fbf5703fcab8f6b1abdaa6d866.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
453525fbf5703fcab8f6b1abdaa6d866.exe
Resource
win10v2004-20231215-en
General
-
Target
453525fbf5703fcab8f6b1abdaa6d866.exe
-
Size
533KB
-
MD5
453525fbf5703fcab8f6b1abdaa6d866
-
SHA1
4e0262e6c81f73a8106a24da05c458f6a0c2caa2
-
SHA256
8a13e30c8a175da6bdea656c79e3e0514afbfd488ddb7a3abe89368f58e3ecb0
-
SHA512
7c9166a51ca1543b1e3113ab8cd2089980d65e6e7bf31ef360b82f529f16c16b45b5c419943dde9f5748b0ea967869b9adaca58b5048643c742053d174df300d
-
SSDEEP
6144:2Ws0l2Qu85sH6bxoDH46o8+an1UwilV0Yuzo89c9LSDRfGMi/8LVTfHSQF5UZHkr:2HPQH5foDp3RiH0YZ8bDEPs11z9X5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 453525fbf5703fcab8f6b1abdaa6d866.exe
Files
-
453525fbf5703fcab8f6b1abdaa6d866.exe.exe windows:5 windows x86 arch:x86
c2b6debfb2dc5536955a66c0d2d22e05
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFix
HeapReAlloc
lstrlenA
WritePrivateProfileStructA
GetModuleHandleExA
SetLocalTime
GetDriveTypeW
SetEndOfFile
InterlockedIncrement
_lwrite
CreateDirectoryW
GetProfileSectionA
SetVolumeMountPointW
OpenSemaphoreA
GetModuleHandleW
ReadConsoleW
EnumTimeFormatsA
CreateActCtxW
CreateDirectoryExW
GetPriorityClass
GlobalAlloc
GetVolumeInformationA
LoadLibraryW
GetConsoleMode
Sleep
ReadConsoleInputA
CopyFileW
_hread
GetPrivateProfileStructW
GetVersionExW
GetComputerNameExA
SetConsoleMode
Beep
SetConsoleCursorPosition
WriteConsoleW
GetBinaryTypeA
WritePrivateProfileSectionW
TerminateProcess
GetAtomNameW
ReadFile
GetModuleFileNameW
CreateFileW
GetOverlappedResult
FillConsoleOutputCharacterA
GetACP
VerifyVersionInfoW
FindFirstFileA
OpenMutexW
GetHandleInformation
GetLastError
IsDBCSLeadByteEx
GetCurrentDirectoryW
GetThreadLocale
ReadConsoleOutputCharacterA
GetProcAddress
IsValidCodePage
CopyFileA
SetComputerNameA
BuildCommDCBW
ResetEvent
ProcessIdToSessionId
UnhandledExceptionFilter
OpenWaitableTimerW
LocalAlloc
GetFileType
AddAtomW
SetCurrentDirectoryW
GetCommMask
SetSystemTime
SetEnvironmentVariableA
WTSGetActiveConsoleSessionId
SetConsoleTitleW
FreeEnvironmentStringsW
RequestWakeupLatency
CompareStringA
GetCPInfoExA
SetCalendarInfoA
_lopen
ReadConsoleInputW
LocalSize
TlsFree
LCMapStringW
CopyFileExA
CloseHandle
SetStdHandle
GetConsoleCP
SetFilePointer
CompareStringW
GetTempFileNameW
MoveFileA
GetCommandLineW
HeapSetInformation
GetStartupInfoW
InterlockedDecrement
DecodePointer
ExitProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
WriteFile
GetStdHandle
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapValidate
IsBadReadPtr
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
HeapCreate
GetOEMCP
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
HeapAlloc
GetModuleFileNameA
HeapSize
HeapQueryInformation
HeapFree
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
OutputDebugStringA
OutputDebugStringW
IsProcessorFeaturePresent
RaiseException
FlushFileBuffers
user32
GetListBoxInfo
GetComboBoxInfo
GetMenuBarInfo
advapi32
AdjustTokenPrivileges
Sections
.text Size: 442KB - Virtual size: 441KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ