Static task
static1
Behavioral task
behavioral1
Sample
64fd86e59d19e078d8972207e0002af5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64fd86e59d19e078d8972207e0002af5.exe
Resource
win10v2004-20231215-en
General
-
Target
64fd86e59d19e078d8972207e0002af5
-
Size
384KB
-
MD5
64fd86e59d19e078d8972207e0002af5
-
SHA1
51ffdff6ad33f743f9e8d99ed248255782e3a01f
-
SHA256
0ba26452f843f3a731a9537bf5595da08a22929ac81f5d2dd0418b4e229e577c
-
SHA512
3a808f6aa3e701aa7d865ee8e7619cf7d6ec8eaccfa3e8b464355ce8c8e9a67b0cc7e17ede3e41c3a76da8973123ba486c414c269efc5b3fadbf8aa73ac282fe
-
SSDEEP
6144:LrEs6M91Nw6RSA1eQGJr4a7+7utMQM9UJmpcjnlI/QRFo6xmfteNx:Lrl7G6v1eQ84HluJnlI/QRFocKkn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64fd86e59d19e078d8972207e0002af5
Files
-
64fd86e59d19e078d8972207e0002af5.exe windows:4 windows x86 arch:x86
61348da59d4fb853260d70725af7df43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
GetProcAddress
WaitForSingleObject
SetEvent
ReleaseSemaphore
GetProcessHeap
OpenMutexA
GetSystemTime
ResumeThread
VirtualFree
GetLastError
HeapReAlloc
InterlockedExchange
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
TerminateThread
VirtualLock
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
VirtualQuery
user32
GetDesktopWindow
LoadBitmapA
LoadIconA
gdi32
SelectObject
msvfw32
ICRemove
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 701KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ