Static task
static1
Behavioral task
behavioral1
Sample
82a288eea617ea4bda22817e3e6509c7.exe
Resource
win7-20231129-en
General
-
Target
82a288eea617ea4bda22817e3e6509c7.bin
-
Size
273KB
-
MD5
82a288eea617ea4bda22817e3e6509c7
-
SHA1
4a238899b0c921540f30f7129312e9f928ab1038
-
SHA256
45fd11c98bde6bc2670c73ab890cc623b6784632c535eb19d0dae3ebc8ce0408
-
SHA512
1c4d3332dd42da74328b087aa40a328887e558360e36bfde7bd458e2ed532936eba33f302caceba0c92634376d820fb43a66c563150f254e52c088e10c65bf5e
-
SSDEEP
6144:3jcANL1wec32khosSqIh6hRAQTmNtfPO5W18t4A6jWB8T3Kc:3jP+ecFhohhhORr+VPm48t5ibt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 82a288eea617ea4bda22817e3e6509c7.bin
Files
-
82a288eea617ea4bda22817e3e6509c7.bin.exe windows:4 windows x86 arch:x86
20a2f9fbd6719a9cc1689482fb25bd2e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
GetTimeFormatA
GlobalGetAtomNameA
HeapReAlloc
GetDateFormatA
SetStdHandle
TlsAlloc
HeapSize
GetACP
RtlUnwind
GetConsoleOutputCP
GetOEMCP
GetLocaleInfoA
EnumResourceNamesA
TlsSetValue
IsValidCodePage
MultiByteToWideChar
CreateHardLinkA
TlsGetValue
VirtualAlloc
WriteConsoleA
GetCPInfo
RaiseException
shell32
SHGetFolderLocation
SHGetMalloc
SHBrowseForFolderW
ShellExecuteW
SHGetPathFromIDListW
SHGetDesktopFolder
SHAppBarMessage
SHGetSpecialFolderLocation
SHGetFileInfoW
DragAcceptFiles
ShellExecuteExW
Shell_NotifyIconW
occache
FindControlClose
Sections
.text Size: 126KB - Virtual size: 273KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ