Static task
static1
Behavioral task
behavioral1
Sample
55710f87e8b9782a00fa939eac6072e4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55710f87e8b9782a00fa939eac6072e4.exe
Resource
win10v2004-20231222-en
General
-
Target
55710f87e8b9782a00fa939eac6072e4
-
Size
33KB
-
MD5
55710f87e8b9782a00fa939eac6072e4
-
SHA1
f844eba8fdb7eb6aad2e0ce25191adab5c6a92f6
-
SHA256
4958d23865ae1ec9a0163b90cba86ac3ff21ba80c9ed3b2c11ff818b333568e6
-
SHA512
b231f62d7ab44b0a054868512760860e33da8cd1c2044269aa0a0ecd0c2df5155ce95e2ee876a4e3cb8d87aae1e926a7fd97c9746083871d3f2b136f376f38af
-
SSDEEP
768:Sqt2qietHkQvagL4NMFqmFDWWaKmkbrVkl/L:lNZR4+k3mkl/L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55710f87e8b9782a00fa939eac6072e4
Files
-
55710f87e8b9782a00fa939eac6072e4.exe windows:4 windows x86 arch:x86
513921da81876d14c864aba2d62e56fe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__getreent
__main
_impure_ptr
atoi
calloc
ctime
cygwin_internal
dll_crt0__FP11per_process
exit
fprintf
fputc
free
getlogin
getopt_long
getpass
getpwnam
malloc
optarg
optind
printf
puts
realloc
strcasecmp
strcat
strcmp
strcpy
strlen
strrchr
time
vfprintf
kernel32
GetEnvironmentVariableW
GetModuleHandleA
MultiByteToWideChar
netapi32
NetApiBufferFree
NetUserChangePassword
NetUserGetInfo
NetUserModalsGet
NetUserModalsSet
NetUserSetInfo
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 80B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE