SPACE
Static task
static1
Behavioral task
behavioral1
Sample
73cb41db5332608a4af61b3160477222.exe
Resource
win7-20231129-en
General
-
Target
73cb41db5332608a4af61b3160477222
-
Size
1.6MB
-
MD5
73cb41db5332608a4af61b3160477222
-
SHA1
1f84718e269598a8648383d96d8da8285cc6ff4f
-
SHA256
bec50ed1f3309ae5f44f34413ea9eead65ccf1e845acfc2fdf37648428228c72
-
SHA512
856b0ec482d00956b49791ae74a659bf6eb9fafe94f81b2ef3eea58a0a85f18dbb63fe3b5b599ae8261e07c7571f9b3f4544b8df63d2535dcc06f47729e9b6ff
-
SSDEEP
24576:i3cAiNdA3XRx1Oso4niDGseP2qQz94Fah80IhIp5YF:iPivEXRx1O3eOz91h8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73cb41db5332608a4af61b3160477222
Files
-
73cb41db5332608a4af61b3160477222.exe windows:4 windows x86 arch:x86
c654cef3f34010f812255a5a38977e8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
LoadResource
InterlockedExchange
SetEnvironmentVariableA
FlushInstructionCache
GetCurrentProcess
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
lstrcpyA
WinExec
lstrlenA
lstrcatA
GetProcAddress
lstrcmpiA
GetVersionExA
GetVersion
GetModuleFileNameA
SetUnhandledExceptionFilter
GetLastError
CloseHandle
CreateFileA
GetSystemInfo
GetModuleHandleA
GetProcessWorkingSetSize
GlobalMemoryStatus
FormatMessageA
VirtualQuery
GetCurrentThread
LocalFree
lstrlenW
IsBadStringPtrA
WriteFile
GetCurrentProcessId
GetCurrentThreadId
WideCharToMultiByte
SetLastError
Sleep
GetLogicalDriveStringsA
GetTimeFormatA
GetDateFormatA
HeapAlloc
HeapReAlloc
GetProcessHeap
VirtualFree
VirtualAlloc
IsBadReadPtr
ExitProcess
WaitForSingleObject
IsBadWritePtr
SetFileTime
SystemTimeToFileTime
GetTimeZoneInformation
SetFilePointer
CreateDirectoryA
EnumDateFormatsA
DeleteFileA
GetTempPathA
MultiByteToWideChar
FileTimeToSystemTime
FindClose
FindNextFileA
FindFirstFileA
CreateProcessA
GlobalUnlock
GlobalLock
GlobalAlloc
SetThreadPriority
CreateThread
ResumeThread
SetEvent
GetFileSize
DuplicateHandle
WaitForMultipleObjects
HeapFree
TerminateProcess
QueryPerformanceCounter
QueryPerformanceFrequency
UnmapViewOfFile
TerminateThread
CreateEventA
MapViewOfFile
CreateFileMappingA
ResetEvent
ReadFile
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LockResource
GetProfileStringA
FindResourceA
InterlockedIncrement
InterlockedDecrement
MulDiv
lstrcpynA
CreateMutexA
ReleaseMutex
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetThreadLocale
GlobalFree
FileTimeToLocalFileTime
lstrcmpA
GetFileAttributesA
GetFileTime
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
SizeofResource
WritePrivateProfileStringA
GetCurrentDirectoryA
GetTickCount
RtlUnwind
RaiseException
GetSystemTime
GetLocalTime
GetStartupInfoA
GetCommandLineA
GetACP
HeapSize
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetDriveTypeA
IsBadCodePtr
SetStdHandle
Exports
Exports
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 240KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 116KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ