Static task
static1
Behavioral task
behavioral1
Sample
536026f1338e7829a6e43791cb2dbbe0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
536026f1338e7829a6e43791cb2dbbe0.exe
Resource
win10v2004-20231215-en
General
-
Target
536026f1338e7829a6e43791cb2dbbe0
-
Size
76KB
-
MD5
536026f1338e7829a6e43791cb2dbbe0
-
SHA1
6de870c4c92df54e6ac423c17d65bb8405ae44a3
-
SHA256
4dd79fa5bf6b1925b94cfcbe31a397a829d4dc1fe5f86de91188c0386a629d16
-
SHA512
21a1244137e54829f3db13dff9fa63b5d007b88027d8a6e9007aace65e8d010a3374b6fb0d67b7441c4840b760fc93fd093d3394a92d47a6ea8dcf7745e6974e
-
SSDEEP
1536:HNrGvhM+XeXCuMbjAb3mcRypQkAQF2p2wjj:HaXXekHAKYyKkTQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 536026f1338e7829a6e43791cb2dbbe0
Files
-
536026f1338e7829a6e43791cb2dbbe0.exe windows:4 windows x86 arch:x86
fed4692720d33e68436de052d48e29d6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GetCPInfo
GetConsoleMode
GetComputerNameA
OpenFile
CreateProcessA
ReadConsoleA
DeleteAtom
ExitThread
WriteFile
CreateDirectoryA
Sleep
FindAtomA
GetCommandLineA
GetStdHandle
CopyFileExA
ReadConsoleA
CreateThread
CopyFileW
ReadFile
GetLastError
DeleteAtom
ExitThread
WriteFile
GetFileSize
GetComputerNameA
CreateProcessA
OpenFileMappingA
GetComputerNameA
GetLastError
GetFileSize
FindAtomA
OpenFileMappingA
GetStdHandle
DeleteFileW
ExitThread
CopyFileW
CreateProcessA
CopyFileExA
WriteFile
DeleteFileA
CreateThread
Sleep
GlobalFree
CreateProcessA
OpenFileMappingA
DeleteFileA
CopyFileA
GetFileTime
SetLastError
FindFirstFileA
GetFileSize
GetLastError
DeleteFileW
GetComputerNameA
OpenFile
CreateThread
FindAtomA
CreateDirectoryA
SetLastError
Sleep
ReadFile
CopyFileExW
GlobalFree
OpenFileMappingA
OpenFile
DeleteFileA
GetCPInfo
GetConsoleMode
GetLastError
DeleteAtom
GetComputerNameA
GetFileTime
GetCommandLineA
GetFileSize
CopyFileW
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mvdata Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ