Static task
static1
Behavioral task
behavioral1
Sample
ae208b65425c4e43517e80a6563ae08d5638be24f948bc6912383dddd9f3e01e.exe
Resource
win7-20231215-en
General
-
Target
ae208b65425c4e43517e80a6563ae08d5638be24f948bc6912383dddd9f3e01e
-
Size
82KB
-
MD5
36254fc459270a0d5017a1c035432f24
-
SHA1
5d5ffb7577847d76e3e29e3d0b8154fbb3d5f55b
-
SHA256
ae208b65425c4e43517e80a6563ae08d5638be24f948bc6912383dddd9f3e01e
-
SHA512
5a665c02b47b98a9851a4d545f3dd33ccad8b486f3e072cff2cc39b6587957098b54437e85ebb396febc86175bd50abc6a7b7d3dfb5b9a4c77ea21208e59225e
-
SSDEEP
1536:qWEMzyPzfdlk1VHIzge4DaC0IFAdvKZavsLuXFijQxutupECFKZQ8SMK:qMeP7nkbHIJRC0IFAdSZaTXFStuStu8S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ae208b65425c4e43517e80a6563ae08d5638be24f948bc6912383dddd9f3e01e
Files
-
ae208b65425c4e43517e80a6563ae08d5638be24f948bc6912383dddd9f3e01e.exe windows:6 windows x86 arch:x86
edc4b5e9d99e0de278caea3c1f4c81a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetPrivateProfileIntA
GetTimeZoneInformation
GetLocalTime
SystemTimeToFileTime
CreateDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
Sleep
CreateFileMappingA
OpenFileMappingA
GetLastError
MapViewOfFile
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
CreateToolhelp32Snapshot
Process32First
Process32Next
CreateThread
GetCurrentThreadId
GetCurrentProcessId
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
msvcp120
?_Xinvalid_argument@std@@YAXPBD@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
msvcr120
memmove
strcat_s
_vsnprintf
??_V@YAXPAX@Z
strtok
memchr
_errno
strtol
atoi
?terminate@@YAXXZ
free
_beginthreadex
_purecall
??1type_info@@UAE@XZ
??2@YAPAXI@Z
__crtUnhandledException
__crtTerminateProcess
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
__CxxFrameHandler3
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_acmdln
_fmode
_commode
_except_handler4_common
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
??3@YAXPAX@Z
sprintf
_crt_debugger_hook
_getpid
_CxxThrowException
memcpy
malloc
memset
Sections
.text Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ