Static task
static1
Behavioral task
behavioral1
Sample
b3130ace6cc5c17a40cfd5a29be2e3906259911a04ebc35b0f4410a9490d6eca.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
b3130ace6cc5c17a40cfd5a29be2e3906259911a04ebc35b0f4410a9490d6eca.exe
Resource
win10v2004-20231222-en
General
-
Target
b3130ace6cc5c17a40cfd5a29be2e3906259911a04ebc35b0f4410a9490d6eca
-
Size
8KB
-
MD5
29a5f800fb4be9c66af73aac00ce76ad
-
SHA1
bf7ac84f41b3291b8a36a957511a8888459b4db1
-
SHA256
b3130ace6cc5c17a40cfd5a29be2e3906259911a04ebc35b0f4410a9490d6eca
-
SHA512
d4331ad62c0c5a1903650906684137e017dce8e1a489cfc0f5b03914b2cd37fd51fd120e1ebf3ea0475e63dd2dc9c983f3d12c53166c698579cc599155390b74
-
SSDEEP
192:aLqN7YrVJ4wYVR0MokF0DZ7pQG1EYM7228LQL0gE:EqNmVJ4ar7R1GmUIg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b3130ace6cc5c17a40cfd5a29be2e3906259911a04ebc35b0f4410a9490d6eca
Files
-
b3130ace6cc5c17a40cfd5a29be2e3906259911a04ebc35b0f4410a9490d6eca.exe windows:4 windows x64 arch:x64
cd8364932f1dd33abd2e1510015f9238
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
Imports
msvcrt
atoi
strlen
malloc
sscanf
clock
printf
memset
strcpy
strcat
memmove
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit
kernel32
Sleep
VirtualAlloc
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ