Static task
static1
Behavioral task
behavioral1
Sample
647bf32c2caf1d115a4ea65e4e026fee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
647bf32c2caf1d115a4ea65e4e026fee.exe
Resource
win10v2004-20231215-en
General
-
Target
647bf32c2caf1d115a4ea65e4e026fee
-
Size
241KB
-
MD5
647bf32c2caf1d115a4ea65e4e026fee
-
SHA1
3a57d25a6d750a8278c08e9b5b178b80579fc242
-
SHA256
abc3811427039b69a0190ecacc7f06b1cdebe40715168ce1d2a61c49ea6fd2bc
-
SHA512
b7d1d079a3a74666b720b01a1d4c2c203719d3efd592cb41c8b59bbb09c83141e31369248e946fd7844aa278b81847513cc8f00b1c8711f785adf99663ee2d6b
-
SSDEEP
3072:yZCDAPlZQDFRW2JcZapE5Akdw3mKDJWdAeMtdzx20C5SNQqs4asMJ5oCYrohIYRr:y4cM42JuA9EdAeMTzFC8QX4Q5oCYrol
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 647bf32c2caf1d115a4ea65e4e026fee
Files
-
647bf32c2caf1d115a4ea65e4e026fee.exe windows:5 windows x86 arch:x86
4d9839ac597dd1281a8c42cbc5ee1357
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_adjust_fdiv
_initterm
wcscpy
wcstombs
free
malloc
__CxxFrameHandler
_CIpow
_ftol
kernel32
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetProcAddress
IsSystemResumeAutomatic
DeleteCriticalSection
GetSystemDefaultLCID
GetUserDefaultLangID
GetACP
LoadLibraryA
GetConsoleCP
InterlockedDecrement
InterlockedIncrement
GetOEMCP
lstrcatA
lstrcpyA
DisableThreadLibraryCalls
GetLastError
SetEvent
GetUserDefaultLCID
GetCurrentProcess
SetLastError
GetModuleHandleA
GlobalAlloc
Sleep
GetConsoleOutputCP
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
FreeEnvironmentStringsA
VirtualAlloc
winmm
timeGetTime
advapi32
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA
RegCloseKey
ole32
StringFromCLSID
CoTaskMemFree
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 159KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ