Static task
static1
Behavioral task
behavioral1
Sample
85759cab4b9689dd558be1feb11a5151.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
85759cab4b9689dd558be1feb11a5151.exe
Resource
win10v2004-20231215-en
General
-
Target
85759cab4b9689dd558be1feb11a5151
-
Size
317KB
-
MD5
85759cab4b9689dd558be1feb11a5151
-
SHA1
42e2b6e2b8ce15bbdb86211b001a7a8fdae9fbfb
-
SHA256
e4b30c794c05314113eebc2a0efe254e6c2fdffc13cd34968c18b4632e82bcfd
-
SHA512
665475041da96dfe43a584f726e020408dce134d5877244cf82056454b7874b5852a553071dd93b1a39859af11217fadfbd60f5dbe5c3e496ec4dad7183163de
-
SSDEEP
6144:yQr5j/9N0284TMmEiH8VNhNYbm343qRdhZg3hWFXmtpnATQIi:tR0kTMZiHQNYbr3qRd4R5t1Ao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 85759cab4b9689dd558be1feb11a5151
Files
-
85759cab4b9689dd558be1feb11a5151.exe windows:5 windows x86 arch:x86
d701de19fc0e8f9305c9d328ea83de08
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
LdrGetDllHandle
NtAllocateVirtualMemory
RtlUshortByteSwap
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
kernel32
VirtualFree
FreeLibrary
GetTickCount
DeleteFileW
VirtualAlloc
GetStringTypeW
CloseHandle
GetVersionExA
VirtualQuery
lstrcmpiA
CreateFileA
HeapFree
CreateDirectoryW
LCMapStringA
GetTempPathW
GetTempFileNameW
WideCharToMultiByte
VirtualProtect
WriteFile
GetLocaleInfoA
lstrcmpA
HeapReAlloc
FormatMessageA
GetProcAddress
LoadLibraryW
GetCPInfo
lstrlenW
GetStringTypeA
HeapAlloc
Sleep
GlobalFree
LoadLibraryA
lstrlenA
ExitProcess
GetSystemInfo
GetModuleHandleA
LCMapStringW
GlobalAlloc
GetProcessHeap
GetLastError
MultiByteToWideChar
GetShortPathNameW
advapi32
RegOpenKeyA
CloseServiceHandle
StartServiceA
QueryServiceStatus
ChangeServiceConfigA
OpenServiceA
RegCloseKey
RegOpenKeyW
RegOpenKeyExA
RegSetValueExA
RegQueryValueExW
OpenSCManagerA
RegEnumKeyA
RegQueryValueExA
tapi32
lineClose
lineGetID
lineShutdown
lineOpen
lineGetDevCapsW
lineInitializeExW
lineNegotiateAPIVersion
user32
wsprintfA
setupapi
SetupOpenMasterInf
SetupDiCreateDeviceInfoList
SetupDiOpenDevRegKey
SetupDiGetClassDevsW
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupPromptForDiskA
SetupCloseInfFile
SetupGetSourceInfoA
SetupDiGetDeviceInstanceIdW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupGetSourceFileLocationA
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE