Static task
static1
Behavioral task
behavioral1
Sample
67f6dcb6a5c31d4093d801fe4a50ad00.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
67f6dcb6a5c31d4093d801fe4a50ad00.exe
Resource
win10v2004-20231215-en
General
-
Target
67f6dcb6a5c31d4093d801fe4a50ad00
-
Size
60KB
-
MD5
67f6dcb6a5c31d4093d801fe4a50ad00
-
SHA1
e243484688a1c0cd0cfd9738e2edabf6a6472ac9
-
SHA256
3683b18e7ce4d2b564313da7b12d91ae049c62e044592c470d8c8164e24666ae
-
SHA512
1935a3b58a8cdddef011eeb03a7806f66212d3b8d1fcce2696c0064604d381712a12d5e5cb961ffe28faf1f80bdfd96eaf37efda77fe183cb437eb420444e3ee
-
SSDEEP
1536:+3SrTNyorlVva6nnigjmRou2hD0B+5u5jNn:kCyYlVvauigjmIhD0BZRn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67f6dcb6a5c31d4093d801fe4a50ad00
Files
-
67f6dcb6a5c31d4093d801fe4a50ad00.exe windows:4 windows x86 arch:x86
c43a48740d8b47d49cc0a65fe39866b1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
LoadLibraryA
VirtualAlloc
SetThreadAffinityMask
lstrcatA
ExpandEnvironmentStringsA
QueryPerformanceCounter
lstrcpynA
GetEnvironmentVariableA
SetMailslotInfo
lstrcpyA
GetModuleHandleA
GetCommandLineA
GetStringTypeA
LCMapStringW
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
GetProcAddress
MultiByteToWideChar
LCMapStringA
GetStringTypeW
user32
KillTimer
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ