Static task
static1
Behavioral task
behavioral1
Sample
0ae9bde5181a076db7dbd593fb08a2a1b48b21a971e90dfe00f55ab884473b1a.exe
Resource
win7-20231215-en
General
-
Target
0ae9bde5181a076db7dbd593fb08a2a1b48b21a971e90dfe00f55ab884473b1a.exe
-
Size
312KB
-
MD5
40917ed12a275112bdf01600505c757d
-
SHA1
1e7ae97ef68071d21df6c47f4f2328734b9e63a6
-
SHA256
0ae9bde5181a076db7dbd593fb08a2a1b48b21a971e90dfe00f55ab884473b1a
-
SHA512
f6a729c5b8f9da86361f0029e8a7589d942f773eaafdb9e16e29a89e85de9279eb219618f5e3369ddc728fb73483aebab8f4583b180e2889a5bee22a790bb219
-
SSDEEP
3072:rjMaOxMqALKoRIpWqU607pWtjVCoZPN44I7vCANpIipHt5/KiT95bmR7ARTYFkc:rqx0L1RPqUt7puda976EF7T3aFk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ae9bde5181a076db7dbd593fb08a2a1b48b21a971e90dfe00f55ab884473b1a.exe
Files
-
0ae9bde5181a076db7dbd593fb08a2a1b48b21a971e90dfe00f55ab884473b1a.exe.exe windows:5 windows x86 arch:x86
0d9cb23d9fe95b80f6910ba49a7b0000
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasesLengthW
GetLocaleInfoA
SetComputerNameExA
WriteConsoleOutputCharacterA
FindResourceW
InterlockedIncrement
InterlockedCompareExchange
GetComputerNameW
SetCommBreak
CreateHardLinkA
GetTickCount
GlobalFindAtomA
LoadLibraryW
SetConsoleMode
WriteConsoleW
GetStartupInfoW
FindFirstChangeNotificationW
SetLastError
GetProcAddress
VirtualAlloc
SetComputerNameA
LoadLibraryA
LocalAlloc
QueryDosDeviceW
AddAtomA
lstrcmpiW
GetModuleHandleA
IsDebuggerPresent
CancelTimerQueueTimer
GetCurrentProcessId
ResetWriteWatch
DeleteFileA
SetThreadContext
GetLastError
GetComputerNameA
GetModuleHandleW
Sleep
ExitProcess
HeapAlloc
HeapFree
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
RtlUnwind
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
gdi32
GetCharABCWidthsFloatA
DeleteMetaFile
shell32
DuplicateIcon
Sections
.text Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ