Static task
static1
Behavioral task
behavioral1
Sample
88c51c41e9894e4679fa1c31195bbaa2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
88c51c41e9894e4679fa1c31195bbaa2.exe
Resource
win10v2004-20231222-en
General
-
Target
88c51c41e9894e4679fa1c31195bbaa2
-
Size
83KB
-
MD5
88c51c41e9894e4679fa1c31195bbaa2
-
SHA1
b372cdd91235a1994bfe5e76e645530a757fb78e
-
SHA256
14e2b9fb6cb58f3e9d40213debf992e91c277c0508bd2a4e2339223af970bacf
-
SHA512
dd188dbcfb3a62c8ddcbfce115d3cae5f993d68f35216a45b42f3742fa72a4145c092052122f8479bd336760bb7ac1ffc290ef8cedfb922122e82ce1dddee2d3
-
SSDEEP
1536:+l6evRIL/RPtVSecTNqDxRgYWw/U/0K7W7e1sGcaOQXg439t+TkZ6iNHVFW8lXbW:veqJlVSecTMDxRrWw/00Kkf+TXg4z+nd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 88c51c41e9894e4679fa1c31195bbaa2
Files
-
88c51c41e9894e4679fa1c31195bbaa2.exe windows:5 windows x86 arch:x86
3d8529cf161b35032efbbf1db716fa4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
free
__setusermatherr
_initterm
_iob
_except_handler3
_onexit
fopen
_exit
malloc
sin
_acmdln
exit
strlen
strcmp
signal
fclose
_XcptFilter
_adjust_fdiv
__getmainargs
strstr
__p__commode
__set_app_type
__p__fmode
fprintf
fwrite
__p__environ
user32
GetDesktopWindow
kernel32
GetModuleHandleW
GetStartupInfoA
Sections
.text Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ