Static task
static1
Behavioral task
behavioral1
Sample
9a6812e856b47ee5ed153d98cb17a5fc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
9a6812e856b47ee5ed153d98cb17a5fc.exe
Resource
win10v2004-20231215-en
General
-
Target
9a6812e856b47ee5ed153d98cb17a5fc
-
Size
129KB
-
MD5
9a6812e856b47ee5ed153d98cb17a5fc
-
SHA1
c85ec311af83983b287522bf296b5d6b56539477
-
SHA256
ec51fc9bcae845aa4647fa89636b89b2ef054027688fa7c879cfff6c94f9b2ca
-
SHA512
10fba98fc47b510991a5412865cb3cff5bf019b9b3fdcafc8a8bbe715dfd867db79062d026f6df7b82aec361a43d70a0344e23bbbdda3b2a0e49cb500038a224
-
SSDEEP
3072:ze0rChg7nnvL/IdlAHrBL10x6YP3wkT7S1:C10vknqBkZvwB1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a6812e856b47ee5ed153d98cb17a5fc
Files
-
9a6812e856b47ee5ed153d98cb17a5fc.exe windows:4 windows x86 arch:x86
efb8dea7e00022993f3632e0deb57df0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
kernel32
CreateThread
lstrcatA
FlushInstructionCache
SetEvent
WaitForSingleObject
GetStartupInfoA
GetCurrentThread
FindFirstFileW
ResetEvent
InterlockedCompareExchange
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
UnhandledExceptionFilter
CreateFileW
CloseHandle
LeaveCriticalSection
GetDriveTypeW
WaitForMultipleObjects
GetOverlappedResult
TerminateProcess
FindClose
GetCurrentProcess
CreateSemaphoreA
LocalFree
InterlockedExchange
DeleteCriticalSection
SetFilePointer
EnumResourceNamesA
EnterCriticalSection
FreeLibrary
SetUnhandledExceptionFilter
Sleep
QueryPerformanceCounter
InitializeCriticalSection
GetVersionExA
GetLastError
SetEndOfFile
ExitProcess
ReleaseSemaphore
CreateEventA
LocalAlloc
lstrlenA
GetLocalTime
WriteFile
ReadFile
LoadLibraryA
GetTickCount
Sections
.text Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 340KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ