Static task
static1
Behavioral task
behavioral1
Sample
85064c496c641eca567a1f3f03230426.exe
Resource
win7-20231215-en
General
-
Target
85064c496c641eca567a1f3f03230426
-
Size
224KB
-
MD5
85064c496c641eca567a1f3f03230426
-
SHA1
50776082f7f07a8ac5d053688d195c51b6fc2f28
-
SHA256
a6276c89bdbf3c0b090d759b5dfbb9cd1f8d99da89379f618f8f49324a688d44
-
SHA512
9efc11d2498f91157cc320b9cafbd5507f53a18c2fc8b678236cf8e23ade86c66f9e67888221fe456759b38eea7a2a4e3ce49cc845479755e039e5b4557f5068
-
SSDEEP
3072:Bb8HR3liqe7oF2Ggr1bHm406OwlbSc+t1ro0ZkYHGqDcwpEID6wGUWcktOZx5WrI:Bge7AibmiQcjWG5MGUWttUx54I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 85064c496c641eca567a1f3f03230426
Files
-
85064c496c641eca567a1f3f03230426.exe windows:4 windows x86 arch:x86
39e44c0caad4b7cd86da6dfe2eb99abb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
Sleep
VirtualAlloc
FlushFileBuffers
SetEvent
FileTimeToLocalFileTime
OpenMutexA
LoadLibraryA
GetSystemDirectoryA
GetProcAddress
GetModuleHandleA
LocalReAlloc
CreateTimerQueue
IsBadCodePtr
FindClose
VirtualAllocEx
GetLastError
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
VirtualQuery
InterlockedExchange
RtlUnwind
VirtualProtect
VirtualLock
ResetEvent
CreateEventA
HeapReAlloc
HeapAlloc
GetCPInfo
GetSystemInfo
GetOEMCP
GetACP
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
user32
LoadCursorA
GetDesktopWindow
GetDC
EnumChildWindows
IsIconic
SetTimer
ReleaseDC
CreateIcon
SetCursorPos
GetWindowRect
SetCursor
DrawTextA
EnumWindows
GetCursorPos
gdi32
SelectObject
PatBlt
CreateDIBPatternBrushPt
shell32
DuplicateIcon
psapi
GetModuleBaseNameA
GetModuleInformation
msvfw32
ICInstall
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 156KB - Virtual size: 153KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ