Static task
static1
Behavioral task
behavioral1
Sample
882764dd2ed66f5e6e8d56e8df4c2426.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
882764dd2ed66f5e6e8d56e8df4c2426.exe
Resource
win10v2004-20231215-en
General
-
Target
882764dd2ed66f5e6e8d56e8df4c2426
-
Size
1.0MB
-
MD5
882764dd2ed66f5e6e8d56e8df4c2426
-
SHA1
45391abb4ffbaf0683d3d78fc714567b33e3e34c
-
SHA256
cf23f9ca3c8e134b6abcb44237096e65e5ac64de7e13ab0ecae001cb0097d1c4
-
SHA512
fea1209194d89100c21db4333560ab3805eb4bcc31dea3095d0ba3fd3a3e2893f2be72dd6ad7e63c68494d088bbaf78d3af4d8338a203748ca60af152d711a91
-
SSDEEP
12288:IV4WZ/wuZlfk+/VUE601xAyIL7cYOWqjuDgfm9VJQct99oWRUi/y/QYgKyMSNm6Q:/WZ/rF/rKEkgiQS9JRI4Yg4S46e9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 882764dd2ed66f5e6e8d56e8df4c2426
Files
-
882764dd2ed66f5e6e8d56e8df4c2426.exe windows:4 windows x86 arch:x86
66479d707c63c6199bbbb7d0006522df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetTickCount
SetFilePointer
CreateProcessA
GetLastError
DeleteFileA
GetCurrentThreadId
GetTempPathA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
GetVersionExA
MultiByteToWideChar
GetACP
GetModuleFileNameA
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
LockResource
SizeofResource
LoadResource
FindResourceA
ReleaseMutex
CreateMutexA
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
CompareStringW
ResetEvent
ReadFile
SetEndOfFile
GetOEMCP
GetCPInfo
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
WideCharToMultiByte
IsBadWritePtr
VirtualAlloc
OutputDebugStringA
SetEvent
CreateEventA
CreateThread
lstrlenA
GetFileAttributesA
FindFirstFileA
FindClose
WriteFile
CloseHandle
WaitForSingleObject
VirtualFree
HeapCreate
GetEnvironmentVariableA
HeapSize
CreateFileA
CompareStringA
TerminateProcess
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
RaiseException
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapReAlloc
InterlockedIncrement
InterlockedDecrement
HeapFree
HeapAlloc
RtlUnwind
SetEnvironmentVariableA
user32
PostMessageA
KillTimer
LoadStringA
IsDialogMessageA
SetTimer
SendMessageA
LoadImageA
GetSystemMetrics
PostQuitMessage
DestroyWindow
FindWindowA
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoA
GetWindowRect
GetWindow
GetParent
GetWindowLongA
SetWindowLongA
DialogBoxParamA
GetActiveWindow
IsDlgButtonChecked
EndDialog
DefWindowProcA
CheckDlgButton
CallWindowProcA
CreateDialogParamA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetDlgItem
advapi32
RegSetValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
StartServiceA
RegQueryValueExA
RegCreateKeyExA
RegDeleteValueA
RegOpenKeyA
RegCloseKey
ole32
CoCreateInstance
CoInitialize
CoUninitialize
comctl32
InitCommonControlsEx
ws2_32
shutdown
WSACleanup
closesocket
WSACreateEvent
WSAEnumNetworkEvents
WSAStartup
WSAEventSelect
recv
send
WSAGetLastError
connect
socket
htons
gethostbyname
Sections
.text Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ