Static task
static1
Behavioral task
behavioral1
Sample
87b7054b34f7554b2002c690cc399340.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
87b7054b34f7554b2002c690cc399340.exe
Resource
win10v2004-20231215-en
General
-
Target
87b7054b34f7554b2002c690cc399340
-
Size
329KB
-
MD5
87b7054b34f7554b2002c690cc399340
-
SHA1
bb78952e20b0102fcf22bc8c6f70668ff33829f1
-
SHA256
86091e3dec5bcc2a12dab0fbe022f3842e5f47013a9be562bc027f4bbc86015b
-
SHA512
07a48d1fc16903b133cb116a4b39d259a241a632065ddca2e1f8bf39f83957867e29d1234151990d9b4911a87518b615ccb4c87eeffd7ac5703d31c24c25ba1a
-
SSDEEP
6144:4fLf6071TwoM6xsgpSsUkpG/rWmowOu1nHVlPYp97OMuQIFih8oYEG:4fLfHH9x75GWm2u1nHVlPY7yMuhg8E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87b7054b34f7554b2002c690cc399340
Files
-
87b7054b34f7554b2002c690cc399340.exe windows:4 windows x86 arch:x86
430aade6e36fb6834550584da171bef5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
GetProcAddress
CreateFileA
GetCurrentProcess
GetWindowsDirectoryA
SetEvent
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
GetVersion
GetTickCount
GetLastError
GetCurrentThreadId
GetCurrentThread
ExitProcess
VirtualAlloc
GetStartupInfoA
user32
CreateWindowExA
LoadCursorA
ReleaseCapture
SetWindowTextA
LoadBitmapA
GetDC
DestroyWindow
EnableWindow
msvcrt
_onexit
__dllonexit
_controlfp
_strcmpi
_except_handler3
__set_app_type
__p__fmode
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 313KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ