Static task
static1
Behavioral task
behavioral1
Sample
87b5d24d23f9e37edee9038dcf899f72.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
87b5d24d23f9e37edee9038dcf899f72.exe
Resource
win10v2004-20231215-en
General
-
Target
87b5d24d23f9e37edee9038dcf899f72
-
Size
380KB
-
MD5
87b5d24d23f9e37edee9038dcf899f72
-
SHA1
5246226a79f19c3b7c0c7f2af8ab02963227ec0b
-
SHA256
19df14b7755ab805a090b80e70365c090c448188bf16fcc4a8af684f0e2e6a11
-
SHA512
a843557a5d6f866eb3a936a69da49cfed28c4f81d39018244a20c04eb3e4f3b62b936816563e43234fd1815c7134f8e77d960617839c9e61770d12a10984ff4d
-
SSDEEP
6144:MYRRMRiWjhtgYXL7TO6dHyF6EDWVUlMVcZOV6fGhmLjAR73t3ygCkv:HRRMXlbq6Vxh8MV9VOpO73tokv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87b5d24d23f9e37edee9038dcf899f72
Files
-
87b5d24d23f9e37edee9038dcf899f72.exe windows:4 windows x86 arch:x86
4c5a02371027cf933d690dc63b1e06d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
GlobalFree
CloseHandle
GlobalSize
InterlockedExchange
GetPrivateProfileIntW
CreateMutexA
GetModuleHandleW
ResumeThread
LocalFree
FindVolumeClose
lstrlenA
GetStdHandle
GetACP
CreateEventA
ResetEvent
GetExitCodeProcess
WriteFile
VirtualAlloc
GetEnvironmentVariableW
advapi32
RegCloseKey
ControlService
RegDeleteValueA
CreateServiceA
IsValidSid
RegQueryValueW
RegCreateKeyExW
IsValidAcl
RegDeleteKeyA
IsTextUnicode
RegEnumKeyW
ClearEventLogA
CloseEventLog
amstream
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer
sysdm.cpl
NoExecuteAddFileOptOutList
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 370KB - Virtual size: 370KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ