Static task
static1
Behavioral task
behavioral1
Sample
70cf8ded0f00fffe8453687dff53e5f4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70cf8ded0f00fffe8453687dff53e5f4.exe
Resource
win10v2004-20231222-en
General
-
Target
70cf8ded0f00fffe8453687dff53e5f4
-
Size
87KB
-
MD5
70cf8ded0f00fffe8453687dff53e5f4
-
SHA1
50370bb54c55933b8d812117de63f5c623db8b84
-
SHA256
4fbfe99637d64f474270cdf332b24b5c9c9098b339d116be7764cb5bcfd6ae21
-
SHA512
4269c1333dae1c06e25ee2d4c8be54e19a1bf57b2bd96a53c4cdf93d92507953f64da1991c4e0f5ed16d709f3dc51232608dae850c332c35e1e7d458c8b4df0e
-
SSDEEP
1536:szu6RoWFfdTHoXTuY+yYcKQ/6yTsAtR/qkjJJujx8qWTVsQJYUnXrHjhBUQdmQ:+3FfJUuY+3ct/6yTh/qcajqCQnnXrPUQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70cf8ded0f00fffe8453687dff53e5f4
Files
-
70cf8ded0f00fffe8453687dff53e5f4.exe windows:4 windows x86 arch:x86
4707388b2f0af6d036a7b0239abaedef
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleCP
GetStartupInfoA
VirtualAllocEx
HeapSize
GetCommandLineW
RemoveDirectoryA
OpenEventW
CreateFileA
GetTickCount
GetEnvironmentVariableW
ClearCommBreak
SetEvent
GetModuleHandleA
OpenProcess
GetFileAttributesA
SetLastError
DeleteFileA
WriteConsoleA
ReleaseMutex
ExitProcess
ResetEvent
user32
GetSysColor
DispatchMessageW
GetWindowLongA
GetKeyState
CallWindowProcW
DispatchMessageW
GetDC
GetDC
GetCursorInfo
PeekMessageA
GetCaretPos
FindWindowA
GetClassInfoA
linkinfo
CreateLinkInfoA
CreateLinkInfoA
CreateLinkInfoA
CreateLinkInfoA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
iolcsxn Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE