Static task
static1
Behavioral task
behavioral1
Sample
55ae174135a524eea21f1de46cbbb037.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
55ae174135a524eea21f1de46cbbb037.exe
Resource
win10v2004-20231222-en
General
-
Target
55ae174135a524eea21f1de46cbbb037
-
Size
18KB
-
MD5
55ae174135a524eea21f1de46cbbb037
-
SHA1
34aa9ae55d7286e803affb63a0b94f014faa4062
-
SHA256
44e0b81d1a736db78c72b17a12fe7d9747dd69a333a76328ce7aa1345949e287
-
SHA512
fd3ab01415f5368e14803de48ea62abefe75855d80c3359261c09308b5140e02df43b25afd45ba23b9b439c4c907dc50af7fd5f4b8c229b51e0444d0e7e7cd7d
-
SSDEEP
384:UcflKDFbNCJ6Uc1vKcp/DcXz0XxwonmJjPoXI:UcfWFkJg5L8zIxwonmJjAXI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 55ae174135a524eea21f1de46cbbb037
Files
-
55ae174135a524eea21f1de46cbbb037.exe windows:4 windows x86 arch:x86
dda8554e25f87440552a70d992d2c7db
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
strncmp
strstr
strchr
atoi
strncpy
RtlRandom
sprintf
memset
_chkstk
kernel32
GetSystemDirectoryA
GetSystemTime
CloseHandle
GetModuleHandleA
GetModuleFileNameA
GetLocalTime
CreateFileA
SetFilePointer
SystemTimeToFileTime
GetCurrentProcess
VirtualFree
GetWindowsDirectoryA
WriteFile
Sleep
TerminateProcess
ReadFile
VirtualAlloc
GetTimeZoneInformation
SetCurrentDirectoryA
GetLastError
GetProcAddress
iphlpapi
GetAdaptersInfo
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lrkojwy Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE