Static task
static1
Behavioral task
behavioral1
Sample
c32a10cccc846fca45ae6711cf8845c11d0785ad7306b55cb837f335b23869ee.exe
Resource
win7-20231215-en
General
-
Target
c32a10cccc846fca45ae6711cf8845c11d0785ad7306b55cb837f335b23869ee
-
Size
816KB
-
MD5
0950c8f577424fd78fae4996959a82ef
-
SHA1
5a5ac016071f4bc1f483600231949403322a8edd
-
SHA256
c32a10cccc846fca45ae6711cf8845c11d0785ad7306b55cb837f335b23869ee
-
SHA512
c3cf3453605f825d5ea952240ef6f45d4ef22e09d100308c1ad0be57fc5dc5722e4a64e1b8a9be4816d49654cdadcae372cdcb4fe3f61bdafd24d4b84ea2cd4e
-
SSDEEP
24576:cnO5p0vVuXp5SF+5JwXgb1081v3iYYKLJxNk:tD0vVG+F+bmgb1+cxC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c32a10cccc846fca45ae6711cf8845c11d0785ad7306b55cb837f335b23869ee
Files
-
c32a10cccc846fca45ae6711cf8845c11d0785ad7306b55cb837f335b23869ee.exe windows:6 windows x86 arch:x86
92bd7bd723ea3f3cc73db7c542854456
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ProcessIdToSessionId
Sleep
GetLastError
Process32NextW
LockResource
Process32FirstW
HeapReAlloc
CloseHandle
RaiseException
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
WTSGetActiveConsoleSessionId
DeleteCriticalSection
GetProcessHeap
CopyFileW
GetConsoleWindow
lstrcmpW
MultiByteToWideChar
OutputDebugStringA
CreateFileW
OutputDebugStringW
WideCharToMultiByte
FlushFileBuffers
CreateDirectoryW
ReadFile
GetFileSizeEx
FindNextFileW
lstrlenW
GetModuleFileNameW
WaitForSingleObject
GetFileAttributesW
GetFileSize
GetExitCodeProcess
WriteConsoleW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
CreateToolhelp32Snapshot
HeapSize
OpenProcess
FindClose
InitializeCriticalSectionEx
HeapFree
FindFirstFileW
WriteFile
SizeofResource
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetTimeZoneInformation
ExitProcess
GetModuleHandleExW
GetStdHandle
GetCommandLineA
GetCommandLineW
SetFilePointerEx
GetFileType
GetConsoleOutputCP
GetConsoleMode
CreateProcessW
GetFileAttributesExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadConsoleW
SetEndOfFile
user32
ShowWindow
advapi32
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
DuplicateTokenEx
RegCloseKey
userenv
CreateEnvironmentBlock
GetAllUsersProfileDirectoryW
GetUserProfileDirectoryW
Sections
.text Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 576KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE