Static task
static1
Behavioral task
behavioral1
Sample
f03b14231a904ab95fc49f51991d9c88.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f03b14231a904ab95fc49f51991d9c88.exe
Resource
win10v2004-20231222-en
General
-
Target
f03b14231a904ab95fc49f51991d9c88.exe
-
Size
86KB
-
MD5
f03b14231a904ab95fc49f51991d9c88
-
SHA1
371e0c9cfaf8da907e19621f87308c2f2fdf1a24
-
SHA256
863718b2cc86d13ba62aaee6e3a5497da903b2c30cbd56b0a591b5249312c930
-
SHA512
2f1eba6a7db05c892236eda27d5c028788fc6308163347921b146b7750367efa6906cbb97483e366b38cec3d37267e910811fa57085b0cafa591b29fb7116bb4
-
SSDEEP
1536:VffzTBicF97e/+Gu/SpViEUmMDoxRRLfPbE3BdGKr6JXj7Oj9k2iHLWn:BfzL9CyuhMDopOdGK6XjCj9iHLWn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f03b14231a904ab95fc49f51991d9c88.exe
Files
-
f03b14231a904ab95fc49f51991d9c88.exe.exe windows:4 windows x86 arch:x86
7c308a52f6c55fa8dd14ee3913fd6e36
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapAlloc
RtlUnwind
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
HeapSize
LCMapStringA
LCMapStringW
GetLocaleInfoA
VirtualProtect
GetSystemInfo
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ